• New Tree View API Endpoint

    June 13, 2025

    We just launched a new Search API endpoint to retrieve the Tree View data! See the documentation in our help system: help.intelx.io/api/search/#filetreeview API License For the first time since launching the API license in 2022, we are increasing its …

  • New Search API Instances

    March 8, 2025

    Earlier this month we changed the Search API instances for non-registered users and free users. The previous instance “api.intelx.io” is retired. To see the API instance and API key assigned to your account, visit the Developer Tab 🔒 on your user …

  • New Category “DNS”

    January 12, 2025

    We have added a new category “DNS” to Intelligence X. It indexes DNS records data such as raw TXT records for domains. The bucket name is “dns”. As of today, the bucket stores 204.489.722 records. Full access to this new category requires a paid …

  • New Identity Portal Version 💥

    January 3, 2025

    We added an extremely powerful new feature to our Identity Portal product: Reverse Lookup You can now search for a domain or URL and get all leaked accounts for a particular service. Previously you would have to manually search for the domain or URL …

  • Newsletter 2023-01-01

    January 1, 2023

    2023 New Year’s Special 🍾 Our New Year’s Special is live! 🍾🥂 1-month license for € 50! This offer is valid for a week until January 7, 2023. Full access (same as Researcher license). This equals to a 76% discount. You can order it here: …

  • Price Increase 2023

    November 19, 2022

    Starting with December 1, 2022 we are changing license tiers and adding new tiers. This is essentially a price increase. Orders placed before that date are not affected. Here are the main changes: The Professional license will be sunsetted. A new …

  • List of buckets

    May 5, 2022

    At Intelligence X we categorize data sources into buckets. Buckets can be used as filters and to broadly identify the source of individual search results. For example, the bucket “Darknet Tor” indicates the result origins from some a Tor hidden …

  • Adding support for new top-level domains

    April 6, 2022

    We just added support for an additional 152 top-level domains (TLDs), increasing the support to 511 TLDs in total. Support means that you can search for those domains across intelx.io and APIs, and internally that our backend supports processing …

  • A word of #OPSEC @theguardian

    March 7, 2022

    Earlier today at 11:24 The Guardian Journalist Shaun Walker posted the security procedure and the security token used to pass makeshift checkpoints in Ukraine related to the Russian Ukrainian war: This is a reminder to journalists – and the public – …

  • Newsletter 2022-03-01

    March 1, 2022

    We stand with Ukraine 🇺🇦 Intelligence X commends the brave Ukrainian soldiers. 🇺🇦 Free access for the Ukrainian Government We have whitelisted the domain gov.ua – all accounts signed up on intelx.io with that email ending have full access to 100 …

  • Newsletter 2021-12-24

    December 24, 2021

    December 2021: Christmas Special 🎄🎁 Merry Christmas! To celebrate, we are offering a special 1-month license for € 50. This offer is valid for a week. It provides the same type of access as the Pro license that costs € 2000 /year. To take advantage …

  • Intelligence X welcomes seasoned Security Expert to Advisory Board

    December 2, 2021

    Co-Founder of QuoScient GmbH and QuoLab Technologies Inc., former Global Head of Malware Research and Response at Deutsche Bank joins Intelligence X’s newly created advisory board as the company is gaining momentum. “We are very happy to welcome …

  • Newsletter 2021-06-29

    June 29, 2021

    June 2021: New Usenet data category We added the new data category Usenet. It contains historical and current data from Usenet, which is “a worldwide distributed discussion system”. Today, Usenet is mostly used for piracy. This new category stores …

  • Newsletter 2021-04-16

    April 16, 2021

    Intelligence X supports Peernet – Founder’s Statement I am excited to announce Peernet, a decentralized network that allows sharing of data freely without censorship and restrictions. Here is the pitch deck: peernet.org/dl/Peernet%20Deck.pdf Peernet …

  • Newsletter 2021-02-20

    February 20, 2021

    February 2021: Launch of the European Internet Archive The European Internet Archive just launched! 🎉🥳 ➡ archive.eu 225 TLDs added to the list of web crawling We have added 225 top-level domains (TLDs) to the list of web crawling. Find the full list …

  • New Category “Bot Logs”

    February 10, 2021

    We have added the new category “Bot Logs”. It contains data collected by and leaked from viruses such as Azorult. Such data is often sold on marketplaces such as the Genesis Market. We decided to index such data into this new category to help …

  • Adding 225 TLDs to the list of web crawling

    January 28, 2021

    We are excited to announce that we just added 225 top-level domains (TLDs) to the list of web crawling! Below is the full list. The domain count per TLD represents the domains registered according to DomainTools. We group multiple TLDs into “buckets” …

  • Newsletter 2021-01-23

    January 23, 2021

    January 2021: Capitol Hill Riots Archive, New Features Our dataset contains now 30 billion records and grows by +3 billion every month. Last year has been incredible for us. We are growing by any metric – all organically. Searches are up 113% Q-on-Q …

  • Archiving Capitol Hill riots’ media

    January 7, 2021

    We are archiving media from todays Capitol Hill riots. Follow our Twitter account for updates. https://twitter.com/_IntelligenceX/status/1346967229187952644 We have archived the Capitol Hill riots media here: …

  • Newsletter 2020-12-22

    December 22, 2020

    December 2020: Telegram channel Subscribe to our new Telegram channel at: t.me/intelxio New Telegram subscribers receive a free 3-day Professional license code! We will post frequent updates and technical background info to this channel. 🏛 Open …

  • Our statement regarding Ledger’s Content Removal Request

    December 21, 2020

    Today at 13:14 we have received the following Content Removal Request from Ledger regarding this search result. […] By making this database public, the privacy of over 1 million individuals is violated, which places them at risk of, amongst other …

  • Open Government 🏛

    November 20, 2020

    Open government is the governing doctrine which holds that citizens have the right to access the documents and proceedings of the government to allow for effective public oversight. Wikipedia After the recent firing of Christopher Krebs, the 1st …

  • Newsletter 2020-11-17

    November 17, 2020

    🎙️ Join the webinar with Media Sonar Tomorrow at 2 p.m. EST (= 20:00 CET) we are hosting a webinar with Media Sonar! Sign up here: mediasonar.com/intelligencex-osint-cyber-investigation The title is “How Analysts Use OSINT and Dark Web for Cyber …

  • Newsletter 2020-10-19

    October 19, 2020

    October 2020: Hunter Biden, Maltego Transform v4, Decentralized TLDs 🥳 It has been 2 years since the launch of Intelligence X! At this point we would like to thank our users & customers for their trust and we look forward to the future. …

  • An OSINT investigation into the alleged Hunter Biden email

    October 14, 2020

    Disclaimer: Intelligence X is politically neutral. This investigation is based on public information (open source intelligence). tl;dr: It appears that the email addresses appearing in the alleged email are accurate. This does not validate nor refute …

  • Top-level domain considerations

    September 21, 2020

    We want to give some insight into top-level domains (TLDs) supported by Intelligence X. Even though there are a total of 1,508 available TLDs (full list by IANA), we choose to only support certain TLDs in order to prevent spam, false positives, and …

  • Newsletter 2020-08-27

    August 27, 2020

    August 2020: Latest News & Statistics Public API keys are retired We have retired public API keys. All 3rd party tools and integrations must use per-user API keys. Note: This also affects SpiderFoot users. We have updated our SDK to reflect that …

  • The road to 100 billion records

    August 23, 2020

    At Intelligence X, we value quality over quantity. Our goal is continuous improvement, sustainability, and stability. As we cross the mark of 25 billion records with 100+ TB of storage, it is time to set sail for 100 billion records. Counting records …

  • Newsletter 2020-08-03

    August 3, 2020

    August 2020: Recap of 3rd-party OSINT tools and integrations We are listing all approved 3rd-party integrations here: intelx.io/integrations h8mail: “an email OSINT and breach hunting tool using different breach and reconnaissance services” Maltego …

  • Why we are going to block Tor IPs

    July 5, 2020

    tl;dr: Nothing ever good comes out of Tor. We are going to block Tor IP addresses from signup, login, and search starting on July 5, 2020. Our reasons are rooted in: Tor Hidden Services Are a Failed Technology, Harming Children, Dissidents and …

  • Maltego Transform released

    July 4, 2020

    We just released a Maltego Transform for Intelligence X. The installation instructions are here: github.com/IntelligenceX/SDK/tree/master/Maltego%20Transform Maltego is “software used for open-source intelligence and forensics, developed by Maltego …

  • An investigation into attempted fraud

    July 3, 2020

    We are publishing information about a user who attempted to defraud us. As outlined in previous blog posts and tweets, we are going to aggressively publish the information about anyone trying to attack, hack or defraud us. The person tried to use …

  • New: Identity Portal 🎉

    June 23, 2020

    We launched a new product: “Identity Portal”! It allows users to find all lines in a text where a search term appears, and to download a list of leaked accounts under a specific domain or email address. This product is exclusively available on …

  • Newsletter 2020-06-02

    June 2, 2020

    June 2020: New Phonebook service! 🎉 We just launched a free new service: phonebook.cz It lists all email addresses, subdomains, and URLs for the input domain. Try it out – it’s free! It uses the same dataset as intelx.io – which is 20 billion …

  • Newsletter 2020-05-11

    May 11, 2020

    May 2020: New dorks website, Tor, DDoS test and a Europol takedown Our dataset continues to grow significantly: 17,660,962,195 selectors In the past few months, we have invested in 200+ TB of enterprise storage which allows us to scale up data …

  • Can we DDoS ourselves? We are about to find out. Live self-ddos on 10.05.2020 13:00 UTC

    May 9, 2020

    On Sunday, May 10, 2020, we will DDoS our own website, intelx.io. We will live tweet and update this blog post with any developments and the outcome. The attack will be executed in the same fashion as an actual attack: we’ll do some research, then …

  • Vanity .onion Tor Addresses

    April 27, 2020

    Tor .onion domains are the hashes of public keys. Generally, they look random, but it is possible for am Tor hidden service operator to generate onion domains that start with a human readable part such as “silkroad7rn2puhj.onion”. Those are called …

  • Combating spam websites from Tor

    April 27, 2020

    Certain actors spam Tor by creating many duplicate websites under different .onion domains and then linking them to each other. The cost of doing that is pretty low, considering that all you need is creating a new public key pair (the onion domain is …

  • Tor Hidden Services Are a Failed Technology, Harming Children, Dissidents and Journalists

    April 22, 2020

    Repost from lawfareblog.com/tor-hidden-services-are-failed-technology-harming-children-dissidents-and-journalists for increased visibility. By Brian Levine, Brian Lynn Friday, January 17, 2020, 8:27 AM. Copyright © 2020 The Lawfare Institute. A …

  • Newsletter 2020-04-13

    April 13, 2020

    April 2020: New Python API wrapper and Command Line Interface We have teamed up with zer0pwn to develop a new Python API wrapper and Command Line Interface. It is released in our SDK: github.com/IntelligenceX/SDK/tree/master/Python For details read …

  • New Python API wrapper and Command Line Interface

    April 13, 2020

    We have teamed up with @zer0pwn to develop a completely rewritten Python API wrapper and Command Line Interface. 👉🏼 github.com/IntelligenceX/SDK/tree/master/Python To install the command line tool run these commands (requires Python 3, tested against …

  • Newsletter 2020-03-23

    March 23, 2020

    March 2020 Updates How we prepared for the current global situation We have ordered and deployed 180 TB worth of enterprise storage to be prepared for upcoming price increases and shortages of hard disks. We are reading reports that warn of upcoming …

  • Decoding the US Death Master File

    March 19, 2020

    “The Death Master File (DMF) is a computer database file made available by the United States Social Security Administration since 1980″ according to Wikipedia. It is available here ladmf.ntis.gov but costs $2,930.00 anually. The file has since been …

  • An OSINT investigation into one of our attackers

    March 5, 2020

    On December 11, 2019 we have received 31,866 HTTP requests from the IP 81.171.107.57. Below are few sample log entries: 81.171.107.57 - - [11/Dec/2019:13:52:37 +0000] "POST /login HTTP/1.1" 200 7448 81.171.107.57 - - [11/Dec/2019:13:52:37 …

  • Third unsuccessful DDoS attack

    March 2, 2020

    We were again under DDoS attack on February 11, 2020. We received 177,261 HTTP requests in a time span of 2 hours from 2,682 unique IPv4s. As always, this attack was not successful (it had no impact) and was only noticed due to looking into visitor …

  • Newsletter 2020-03-02

    March 2, 2020

    March 2020: New Data Categories Stay up to date with us on Twitter: twitter.com/_IntelligenceX Private Data Leaks We have revised our license system and launched a new data category exclusively for paid Professional users: Private Data Leaks. Trial …

  • Revised License System & Private Data Leaks

    February 20, 2020

    We have revised our license system! Check out our updated product page intelx.io/product for the details on available licenses and their permissions. Here’s what we published that was not online before: Detailed list of features available for each …

  • Removing X-Score from the user interface

    February 17, 2020

    We have just removed the X-Score from the user interface. It was not properly explained and does not bring enough value to merit keeping it. X-Score is an internal algorithm which ranks results when you select the “Most Relevant” sort order (which is …

  • Transparency Report #2

    February 7, 2020

    Our last transparency report was published some time ago – it’s time for an update! This report includes information about content removal requests and government orders since the last transparency report. Results are deduplicated. We have received …

  • Newsletter 2020-02-07

    February 7, 2020

    February 2020: WeLeakInfo Seizure & Other News 🕵🏻 OSINT Tools: Google Analytics ID Reverse Lookup We have added a Google Analytics ID reverse lookup tab: intelx.io/tools?tab=analytics It will redirect to 3rd party sites that look up a Google …

  • Second DDoS attack against intelx.io

    February 6, 2020

    We were under a DDoS attack on January 26, 2020. We received 4,935,580 HTTP requests in 3 minutes from the 2 IPs 149.202.101.151 and 54.38.23.181. It was the second DDoS attack – the last one was on September 19, 2019. You can see the spike clearly …

  • weleakinfo.com takedown by FBI & friends

    January 17, 2020

    The domain weleakinfo.com was seized yesterday by the FBI. The website shows a takedown notice and shows the logos of NCA, Politie, Police Service Northern Ireland, Department of Justice and Bundeskriminalamt. The note writes: This domain has been …

  • Newsletter 2020-01-12

    January 12, 2020

    January 2020: OSINT Tool Update & Latest News 🕵🏻 OSINT Tools: Reverse Hash Lookup We have added a reverse hash lookup: intelx.io/tools?tab=hash The lookup takes as input a hash of type MD5, SHA1, SHA256, or SHA512. It then redirects the user to …

  • Indexing new “whois” data

    January 9, 2020

    We are constantly indexing the latest whois data for our whois category. “Whois” data contains information about domain ownership. We recently indexed the whois data for October, November, and December 2019 which resulted in 21,168,724 selectors. We …

  • Newsletter 2019-11-27

    November 27, 2019

    November 2019: Academia Program and Inline Filters 🎓 Academia Program We are now offering free access to members of schools and universities. Accounts that register on intelx.io with an email address from a school or university get upgraded …

  • Login Bruteforce attempts against intelx.io

    November 21, 2019

    Minutes ago (evening of November 21, 2019) we just stopped an unsuccessful login bruteforce attack. The attacker’s email address is primeday@protonmail.com and the IPs used in the attack are 163.172.225.39 (a NordVPN IP), 94.36.97.33 and …

  • Inline Filters

    November 18, 2019

    We have added inline statistics & filters. After searching, you can filter by data source, file type or date. Click on the summary line to expand the full statistics view and then click on either the data source, file type or the date heatmap.

  • Newsletter 2019-11-12

    November 12, 2019

    November 2019: Tools and Public Web 🕵🏻 OSINT Tools: New Tabs & Updates We have updated our free OSINT tools: intelx.io/tools ✅ New YouTube DataViewer: Shows metadata and thumbnails ✅ New Vehicle Identification Number (VIN) tab ✅ Added 4 sites to …

  • Open sourcing our fileconversion library

    October 30, 2019

    We released our Go “fileconversion” library here: github.com/IntelligenceX/fileconversion It supports converting many file formats to plaintext, and provides other related functions. It was tested on 184+ million files and is used for intelx.io. We …

  • Newsletter 2019-10-17

    October 17, 2019

    October 2019: Russia, Grouping Results, and DDoS attack 🇷🇺 Russia Want to investigate the Russian government? We are helping with a new search category, “Government: Russia”. It indexes data from Russian governmental domains, including: gov.ru – …

  • Want to investigate the Russian government? We are helping.

    October 5, 2019

    We just released a new search category “Government: Russia”. It indexes data from Russian governmental domains, including: *.gov.ru – Russian Government *.mil.ru – Ministry of Defence of the Russian Federation kremlin.ru – Official website of the …

  • New Feature: Grouping of Similar Results

    October 3, 2019

    A new features was just added: Grouping of similar results. This new feature is optional and can be in the Advanced menu -> Settings -> “Group Similar Results” checkbox. Try it out by clicking on this link and scroll down: …

  • DDoS Attack against intelx.io

    October 3, 2019

    On September 19, 2019, intelx.io was under DDoS attack. 62 unique IPv4s issued 1.259.671 HTTP requests in 20 minutes. The attack was not successful, the service continued to perform normally. Source IPs As per our Terms of Service, we reserve the …

  • Newsletter 2019-09-30

    September 30, 2019

    September 2019: Leaks & Whois Data Two new massive data categories have been added: Public Leaks and Whois. They can be selected in the “Advanced” menu on intelx.io. Our dataset is growing rapidly – we are adding up to 10,000 records per second: …

  • Newsletter 2019-09-13

    September 13, 2019

    September 2019: Latest Updates We have two new major features to share: the Tree View and the History tabs. 📂 Tree View The Tree View tab shows related items to a search result. It simplifies the process of discovery and adds context to the search …

  • New Feature: Virtual Folders

    August 29, 2019

    We just released a major update – virtual folders. For some results, there is a new “Tree View” tab. It shows items that are related either because they are part of one container file, or because the original file was too big and was automatically …

  • Apple’s .DS_Store files may leak filenames

    August 26, 2019

    One of the file formats that does not get much attention are “.DS_Store” files, even though they might be of interest in forensic cases when analyzing hard disks or other folders (including ZIP files) from Mac machines. “.DS_Store” is an abbreviation …

  • Newsletter 2019-08-20

    August 19, 2019

    August 2019: Latest Updates 👋 The last newsletter was sent out early July 2019. Since then, we have new features and blog posts to share! Our free OSINT tool suite has been substantially upgraded. 🕵🏻 OSINT Tools: More tabs, more functionality Check …

  • Viruses on the Darknet

    August 13, 2019

    When talking about viruses on the darknet, the focus is usually on malware that can be purchased or rented (which gets increasingly popular with ransomware). There are also viruses that use the darknet for C&C (command & control) purposes. …

  • WikiLeaks data in numbers

    August 1, 2019

    We have uploaded all the WikiLeaks data to Intelligence X and created a new category. You do not need an account or license to search through the WikiLeaks data using our site. Try it out here! intelx.io/?s=cnn.com&b=leaks.public.wikileaks Source …

  • Newsletter 2019-07-08

    July 8, 2019

    Welcome to our Newsletter! 👋 Intelligence X is excited to bring you periodic updates about our search engine and related tools. 🕵🏻 New OSINT Tools Recently, we developed free OSINT (Open Source Intelligence) tools! Use them here at: intelx.io/tools …

  • Redesigned user interface and added statistics

    June 3, 2019

    Update 6/7/2019: We added a full-screen view (click on the new button next to “Back to result”) as well as a new search bar when clicking on a search result. If you don’t see it, make sure to refresh the website (CTRL + F5) as your browser may have …

  • Social Security Numbers

    May 22, 2019

    We added support for US Social Security Numbers (SSNs)! You can immediately search for them here: intelx.io/?s=086-38-5955 Whis this is important Searching at Intelligence X works based on selectors (strong search terms). When you search for …

  • A comparison of darknet search engines

    May 11, 2019

    A few days ago a new search engine DarkSearch for Tor launched, adding to the mix of other existing search engines out there like Ahmia, Torch, Not Evil, and Haystack – it’s time for a feature comparison! No search engine can cover 100% of the pages …

  • Email verification for intelx.io users

    May 6, 2019

    We have just turned on email verification for all accounts on intelx.io. Existing accounts receive a verification link via email upon login.

  • Native Support for Excel Sheets and PowerPoint Presentations 🗃️

    May 1, 2019

    We just added native support to Intelligence X for the following data formats: Excel Sheets (.XLS, .XLSX, .ODT) PowerPoint Presentations (.PPTX) Native support means end-to-end support. This ranges from indexing and crawling files of various data …

  • “Virut” once infected a North Korean website, its injected iframe is still live

    April 29, 2019

    The North Korean website of the Korea Chonsong Trading Company (at http://www.naenara.com.kp/ko/order/kgf/EN/Index.htm) was infected by the virus, “Virut”. Symantec [1] writes about this malware: W32.Virut is a virus that infects executable files. …

  • A new type of HTTP client attacks is around the corner, and it’s really sneaky

    April 15, 2019

    Google is working on a new feature called “Signed HTTP Exchanges (SGX)” (note: Google also abbreviates it as “SXG”). According to their website: Signed HTTP Exchanges (SGX), part of an emerging technology called Web Packages is now available in …

  • North Korea just got a 3rd internet connection (and no one noticed)

    April 11, 2019

    Say hello to North Korea’s 3rd internet uplink! The North Korean autonomous system AS131279 just got a new uplink to AS133073 Teleglobal Communication Services Limited – which is assigned to Hong Kong, according to APNIC. According to our …

  • 🐍 Python code to use Intelligence X

    April 4, 2019

    We just added Python code to use the Intelligence X API! You can find the code in the SDK at github.com/IntelligenceX/SDK. The code comes with a default API key so you can get started right away. For details on usage please look at the readme file in …

  • How many WiFi networks does North Korea have? At least 1.

    April 3, 2019

    North Korea has at least 1 WiFi network! The above screenshot was taken from the app, WiFi Map, which shows WiFis added by users (crowd-sourced). In this case, user “Trevan Baxter” added a WiFi network on December 23, 2018. The app first connects to …

  • NSA program FAIRVIEW: Collecting trash. 🗑️

    March 20, 2019

    Fairview is a NSA program designed to collect “phone, internet, and e-mail data mainly of foreign countries’ citizens at major cable landing stations and switching stations inside the United States”. It dates back to 1985 [1]. There are various good …

  • Transparency Report #1

    March 14, 2019

    We want to be transparent from the start about how we handle content removal requests and government orders. The service is governed by the Terms of Service and the Privacy Policy. Content removal requests can be filed here. These are the categories …

  • New Developer Tab

    January 25, 2019

    You can access the new developer tab after logging in. Go to: intelx.io/account?tab=developer. The new tab shows useful information for using the Intelligence X API: Your API key API URL The buckets (= data categories) you can access List of all API …

  • Integrate Intelligence X into your project: Use the Software Development Kit

    December 20, 2018

    We are excited to announce our new Software Development Kit. It is free and can be used by anyone to integrate Intelligence X into their project. Whether it’s a website, service, or local program, you can use our versatile API to enrich your data and …

  • I2P added to the index 👀

    December 2, 2018

    We have now added another darknet to our index: I2P. It is substantially smaller in terms of hosted sites than its bigger fellow, Tor. To connect via I2P, you’d normally have to download the I2P router which provides an HTTP proxy in order to visit …

  • Free Alerts for Everyone

    November 28, 2018

    We just released an important feature: alerts via email. Now, you can automatically receive notifications daily, weekly, or monthly if there are new search results. The alert feature is free for everyone. Sign up at intelx.io/signup and then go to …

  • Analyzing the recent Dark Web hosting provider hack

    November 18, 2018

    Catalin Cimpanu @zdnet published yesterday an article “Popular Dark Web hosting provider got hacked, 6,500 sites down”. The hosting provider “dhosting4okcs22v.onion” was hacked on November 15, 2018 and all data was apparently deleted. The creator …

  • We just launched! Intelligence X goes live 🥂

    October 10, 2018

    Press release / Vienna / October 10, 2018 Global launch of Intelligence X: First search engine for the darknet goes online Programmer and IT security analyst Peter Kleissner launches Intelligence X – the first search engine that can be used to …