Welcome to Intelligence X on intelx.io Help System

Search

Mon, 01 Jan 0001 00:00:00 +0000

Why am I seeing different search results?

Observing different search results for the same input (the same search term and filters) can be normal and occur in a variety of instances. There is no guarantee that an exact same search returns exactly the same results.

New search results may have been added or some removed.
Limitations: When many search results are returned and the max results per bucket is reached, then the search stops for that bucket. Multiple searches may return a different window of that max result count per bucket. In such cases it is recommended to filter based on dates and buckets.
Internal maintenance: During server upgrades not all results may be available.
Timeouts: Internal timeouts may influence the number of results returned.
Different API instances: Depending on the assigned license, users may use different API instances that have different internal limitations and timeouts.

Can I perform a full-text search?

Full-text search is not supported. It will never be. Please refer to the Get started and Selector documentation to learn how to use Intelligence X effectively.

Selectors

Mon, 01 Jan 0001 00:00:00 +0000

Below is a non-exhaustive list of supported selectors to perform searches. A selector is a search term supported as input on intelx.io.

Selector	Example
Email address	`[email protected]`
Domain	`example.com`
URL	`https://example.com`
IP (IPv4 and IPv6)	`13.107.246.59`, `2001:db8::1`
CIDR (CIDRv4 and CIDRv6)	`192.168.0.0/24`, `2001:db8::/32`
Phone Number	`+6281234567890`
Bitcoin address	`1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa`
Ethereum address	`0x32Be343B94f860124dC4fEe278FDCBD38C102D88`
MAC address	`00:1A:2B:3C:4D:5E`
IPFS Address	`QmT5NvUtoM5nWFfrQdVrFtvGfKFmG7AHE8P34isapyhCxX`
Social Security Number	`555-50-1234`
Monero Address	`46thSVXSPNhJkCgUsFD9WuCjW4K41DAHGL9khni2VEqmZZhfEZVvcukCp357rfhngZdviZMaeNdj5CLqhLyeK2qZRBCyL7Q`

Domain and URL Searches

Depending on the input, the search algorithm looks for different variations of the input.

Top-Level Domain Support

Mon, 01 Jan 0001 00:00:00 +0000

Below is the non-exhaustive list of supported top-level domains (573). The list might change at anytime and additional TLDs may be supported or existing ones removed.

Support of these TLDs is guaranteed across the Intelligence X system, and includes recognition of domain names in URLs, emails, subdomains, domains across the backend (our crawlers, indexing system) and frontend (intelx.io, identity.intelx.io, APIs).

Note that this support relates to searching, not to our web crawlers which you can review in the bucket list.

Buckets

Mon, 01 Jan 0001 00:00:00 +0000

Intelligence X categorizes data sources into bucket. Buckets can be used to filter search results and broad identify the source of individual results. For example, the bucket “darknet.tor” indicates the result origins from some a Tor hidden service (onion domains) and was collected by our Tor crawler. Buckets have machine readable names (like “darknet.tor”) and corresponding human readable names (like “Darknet Tor”).

Access to some buckets is restricted to paid licenses, while some may be available as partial preview, and others may be available fully redacted, depending on your license.

Download

Mon, 01 Jan 0001 00:00:00 +0000

Why can’t I download full databases?

Intelligence X was not intended for bulk download of entire databases. You can use the Tree View to look at other parts linked to the search result.

Can I download all the files in Tree View at once?

No. However, it is possible to download the files in Tree View separately one by one. There is no API functionality to download all parts of a file that are linked at once.

Export

Mon, 01 Jan 0001 00:00:00 +0000

There are multiple ways to export data locally:

Download individual results on intelx.io: You can download the original copy by clicking on “💾 Save File” in the Actions tab
Download multiple search results on intelx.io: Use the Export ZIP button on the top right after searching
Use the Identity Portal to download all lines where the selector appears

Export ZIP on intelx.io

Go to intelx.io and search for something. If there are more than 1000 results, you may want to apply filters. The Export ZIP function limits are documented here.

Identity Portal

Mon, 01 Jan 0001 00:00:00 +0000

The Identity Portal offers 3 powerful features:

Display search results by line and highlight the search term
Export Leaked Accounts
Reverse Lookup for Stealer Logs

Search Results by Line

This function searches for and lists all lines where a search term appears, and like intelx.io, it searches across all data categories. Each line contains first the ID of the search result, which can be opened by clicking on it. The next columns show the file type and the data category, followed by the line where the search term appears.

License

Mon, 01 Jan 0001 00:00:00 +0000

Do you offer monthly subscriptions?

No. We only offer yearly subscriptions. you can view our available licenses on our product page here: intelx.io/product

Can I trade data for a license?

No. We do not accept any user submissions.

I can’t see data even though I have a trial account.

All newly registered users receive a one-week trial that has all the functions of a fully-paid license, however, access to certain data buckets like leaks and stealer logs is only available to paid users.

Limits

Mon, 01 Jan 0001 00:00:00 +0000

Limits are enforced at the API key level.

Search API: You can see your type of access and daily search credits in the Developer Tab 🔒 on your user account page.
Leaks API: It uses separate daily credits available in the API status page 🔒 of the Identity Portal.

Search

intelx.io

Following limits and timeouts apply to searches on intelx.io. They also applies to the Search API endpoint /intelligent/search.

Function	free.intelx.io (Free Users)	2.intelx.io (Paid Users)
Max Results Per Bucket	200	1000
Max Concurrent Searches	5	10
Search Timeout	1 minute	2 minutes
Keep Results Timeout	3 minutes	10 minutes

identity.intelx.io

The following limits and timeouts apply to searches on identity.intelx.io and the Leaks API endpoint /live/search/internal:

Account

Mon, 01 Jan 0001 00:00:00 +0000

I did not receive the verification email

There is likely no account associated with your email address. If you have tried to create an account and didn’t receive a verification email, it is possible there was a typo in the email address you entered. To resolve this, re-register and make sure to carefully enter your correct email address.

I am blocked from logging in. What do I do?

IP addresses are temporarily blocked by our firewall if it detects unusual activity. This is a common precautionary measure to protect our users.

Search API

Mon, 01 Jan 0001 00:00:00 +0000

The main Search API documentation is available here in PDF format. This site is supplementing that documentation.

`/file/treeview`

The Search API endpoint /file/treeview was added in June 2025. It returns a JSON array of items that represent the data visualized in the “Tree View” to intelx.io end-users. Essentially, this returns a list of other items linked to a given item. Intelligence X links related items such as,

Stealer Logs that contain a collection of files in a single container file (typically a ZIP or RAR file)
Other container files that represent a single leak
Large files that are broken up into multiple files
Archived website copies (different URLs) to a single domain
Archived website copies (different historical copies of the same URL) to a single URL

This endpoint is only available to users with a valid API, Identity, or Enterprise license.

Debugging

Mon, 01 Jan 0001 00:00:00 +0000

Notice of No Support 👆🏻

Intelligence X does not provide support for debugging and development. You are on your own - good luck! 🍀

General API debugging tips:

Log both the request and the response.
If you receive an HTTP error, your input is likely the problem.
If you cannot access our API, your IP is likely blacklisted.

Live Debugging

The easiest way to debug is by using our frontends, which act as clients to the APIs:

Payment

Mon, 01 Jan 0001 00:00:00 +0000

Credit Cards and PayPal

At the moment, we only accept credit card and PayPal payments from verified company accounts.

Content Removal

Mon, 01 Jan 0001 00:00:00 +0000

You can file a Content Removal request here: ➡️ intelx.io/abuse

Who Can Submit a Request

Only the individual who owns the personal data may submit a removal request (data subject). We will not accept requests from third parties unless they have explicit legal authorization to act on behalf of the data owner.

No Anonymous Requests

We do not accept anonymous requests for content removal. All requests must be submitted by identifiable individuals, and if requested, sufficient proof of identity must be provided to verify ownership of the personal data.

Undocumented

Mon, 01 Jan 0001 00:00:00 +0000

Undocumented endpoints and features are not supported.

Search API

`/authenticate/info`

This undocumented endpoint lists access details and daily credits associated with the used API key.

X-Score

The X-Score is a number indicating how relevant a search result potentially is. It shall not be used.

Errors

Mon, 01 Jan 0001 00:00:00 +0000

This site describes error messages encountered by end-users. For API errors, please check the Debugging section.

⚠️️🖐🏻 Invalid Search Term!

intelx.io shows this error message when the input text was not recognized as search selector. See the Selector documentation for supported input search terms.

☠️ Restricted Search Term!

intelx.io shows this error message when the search term is likely restricted. This is done in rare instances to balance the legitimate interests of the owner of the search target.