An OSINT investigation into the alleged Hunter Biden email

Published on October 14, 2020 by

Disclaimer: Intelligence X is politically neutral. This investigation is based on public information (open source intelligence).

tl;dr: It appears that the email addresses appearing in the alleged email are accurate. This does not validate nor refute the content of said email.

The New York Post published today the two articles “Hunter Biden emails show leveraging connections with his father to boost Burisma pay” and “Senate committee investigating alleged Hunter Biden drive, smoking-gun email“. According to The Verge, “Facebook has reduced the reach […] pending a fact-check review”. Vox calls it “a suspicious effort to swing the election”. According to Motherboard, “Twitter […] started blocking sharing of the article in line with the site’s policy against hacked material.”. At the time of writing, this story has not been covered by major outlets, including the New York Times.

The second linked New York Post article features a video which shows the following frame at 00:27:

There are two email addresses clearly visible:

  1. Vadym Pozharskyi <v.pozharskyi.ukraine@gmail.com>
  2. Hunter Biden <hbiden@rosemontseneca.com>

While we cannot verify (or refute) the contents of the email (and we make no claim of its accuracy), we can research the email addresses used.

Vadym Pozharskyi

Searching Intelligence X for Mr. Pozharskyi’s email address reveals a historical whois record from 2014:

It shows that he is the registrant of the domain aigpu.org, with the following Whois details:

Registrant Name:Vadym Pozharskyi
Registrant Organization:Burisma Holdings
Registrant Street: Ryleeva, 10,
Registrant City:Kiev
Registrant State/Province:Kiev
Registrant Postal Code:01129
Registrant Country:UA
Registrant Phone:+380.0442560104
Registrant Phone Ext: 
Registrant Fax: 
Registrant Fax Ext: 
Registrant Email:v.pozharskyi.ukraine@gmail.com

The physical address listed with Burisma Holdings matches with company details listed in the business directory dnb.com and other public sources (including indirectly in this SEC filing which mentions Burisma Holdings Limited).

Therefore, it is accurate to historically associate Vadym Pozharskyi as a member of Burisma Holdings with the email address, v.pozharskyi.ukraine@gmail.com.

Hunter Biden

Our investigation uncovered information that confirms that Mr. Biden is professionally using the email address hbiden@rosemontseneca.com. Four different results independently confirmed this finding. Due to the sensitivity of our findings, we have redacted this email address in Intelligence X. However, we can provide a summary of our findings to news organizations for fact checking.

Rosemont Seneca

Our Phonebook reveals a bunch of email addresses associated with the domain, rosemontseneca.com, including Hunter Biden’s:

Related articles

List of buckets

Published on May 5, 2022 by

At Intelligence X we categorize data sources into buckets. Buckets can be used as filters and to broadly identify the source of individual search results. For example, the bucket “Darknet Tor” indicates the result origins from some a Tor hidden service (.onion domain) and was collected by our Tor crawler. Buckets have human readable names


Adding support for new top-level domains

Published on April 6, 2022 by

We just added support for an additional 152 top-level domains (TLDs), increasing the support to 511 TLDs in total. Support means that you can search for those domains across intelx.io and APIs, and internally that our backend supports processing them. While you can start searching for them immediately, it will take some time until our


A word of #OPSEC @theguardian

Published on March 7, 2022 by

Earlier today at 11:24 The Guardian Journalist Shaun Walker posted the security procedure and the security token used to pass makeshift checkpoints in Ukraine related to the Russian Ukrainian war: This is a reminder to journalists – and the public – to take OPSEC (operations security) seriously and not endanger people on the ground. Posting


Search the blog: