Blog
OSINT guides for investigators
Practical walkthroughs for Roblox, Discord and FiveM OSINT, stealer logs, breach search and IntelX exports, plus how to use the OsintX MCP server and AI Assistant. Every guide shows what to search and what the result looks like.
Featured · AI analyzer
OsintX MCP Server: Connect Claude, Cursor & Gemini CLI
Connect any MCP client to OsintX over Streamable HTTP. Run breach, social, Discord and FiveM lookups and AI Assistant turns from Cursor, Claude, Gemini CLI, Windsurf and more.

Browse by topic
Each guide shows what to search, what OsintX returns, and an example result you can expect.
24 articles
Platform
MCP, API v1, workflows, and what sets OsintX apart.
OsintX Organizations: OSINT for Teams, Government Agencies & Law Enforcement
Personal logins, owner, admin, analyst and viewer roles, shared cases, 2FA, case references and an exportable audit log. Free verified organizations for government agencies, CERTs and police.
Lena Hoffmann
Nov 7, 2026, 6 min read

What Makes OsintX Different from Other OSINT Tools
One workspace for Roblox, Discord, FiveM, stealer logs, breaches and IntelX exports, with masked secrets, source health, an AI Assistant, MCP and API v1.
Jonas Keller
Nov 4, 2026, 6 min read

OSINT Investigation Workflow: From One Identifier to a Case File
A repeatable OSINT workflow: pick a seed identifier, pivot across Discord, Roblox, FiveM, stealer and breach data, verify the leads, and export a case file.
Lena Hoffmann
Nov 3, 2026, 6 min read
AI analyzer
AI review on exports and vision workflows.

OsintX MCP Server: Connect Claude, Cursor & Gemini CLI
Connect any MCP client to OsintX over Streamable HTTP. Run breach, social, Discord and FiveM lookups and AI Assistant turns from Cursor, Claude, Gemini CLI, Windsurf and more.
Jonas Keller
Nov 5, 2026, 7 min read

AI Assistant for OSINT: Discord, FiveM, Breach & Social Pivots
How the OsintX AI Assistant turns one identifier into a case: slash lookups for breach, social, Discord and FiveM, dossier analysis, Investigations boards, and where Roblox and IntelX fit in.
Marcus Brandt
Nov 5, 2026, 6 min read

OsintX AI Assistant: Chat OSINT & Investigations
Use the dashboard AI Assistant for slash lookups, OsintX help, English analysis, IP maps, and /investigation create to save cases to Investigations.
Lena Hoffmann
5 min read
Game OSINT
Roblox, FiveM, and gaming identifier pivots.

Roblox OSINT, Stealer Logs & Discord Pivots
Search Roblox profiles by Discord snowflake, username, or user ID. Tie Roblox accounts to stealer logs, breach hits, and victim manifests on OsintX.
Jonas Keller
7 min read

Discord OSINT to Roblox, FiveM & Stealer Logs
Use one Discord snowflake across Roblox, FiveM, stealer victims, and breach pivots in a single OsintX investigation.
Lena Hoffmann
5 min read

FiveM OSINT: Discord, Steam & License Lookups
FiveM OSINT on OsintX: player names, Discord and Steam identifiers, license hashes, connected CFX servers, ban server IPs, and last-seen intel. Dashboard and API v1 examples.
Marcus Brandt
7 min read
Stealer logs
Infostealer corpora, victims, and investigation workflows.

Stealer Log Search & Victim File Explorer
Investigate infostealer corpora: credential rows, log_id manifests, cookies, and file downloads with DeepIntel-backed stealer search on OsintX.
Marcus Brandt
6 min read

Stealer Victim Files, Cookies & Manifests
Open log_id from stealer hits to browse victim folders, download cookies and screenshots, and use API v1 victim file routes.
Jonas Keller
6 min read

Stealer Log Triage: Which Credential Rows to Read First
How to read a long stealer log result. Group rows by domain, check dates, and decide which rows justify opening the victim files.
Jonas Keller
Nov 5, 2026, 6 min read
Breaches
Email, username, and credential exposure search.

Breach Database OSINT & Email Lookup
Search breach databases by email, username, IP, and domain. See source labels, leak dates, and password exposure types. Export JSON and run breach API v1 from OsintX.
Jonas Keller
4 min read

Email Breach Pivots: Turn One Address into a Timeline
Search one email in breach data, read the source and leak date of each hit, and pivot to usernames and domains without mixing up accounts.
Elif Yildiz
Nov 4, 2026, 5 min read

Check Your Company's Breach Exposure by Domain
Search your own domain in breach data, group hits by source, and turn the result into a reset and MFA plan for the affected staff.
Jonas Keller
Nov 3, 2026, 5 min read
IntelX
Storage exports and stealer-log archives.

IntelX Stealer Log Exports & Storage Search
Download IntelX stealer-log exports by system UUID or storage ID. Parse credentials, cookies, and victim data inside the OsintX workspace and API v1.
Elif Yildiz
6 min read

IntelX System UUID vs Storage ID: Which One to Use
Two IDs can open an IntelX stealer log export in OsintX. See when each one fits, what the download contains and which limits apply.
Jonas Keller
Nov 4, 2026, 5 min read

From IntelX Export to Case Notes: Counts and Domain Groups
Read a parsed IntelX stealer export by counts and domain groups, find the rows tied to your target and carry the identifiers into the next search.
Marcus Brandt
Nov 2, 2026, 6 min read
Geolocation
Image geolocation and location candidates.

Image Geolocation: EXIF GPS vs Ranked Location Candidates
Learn when a photo carries GPS data, what the ranked city or region candidates mean, and how much weight each result deserves.
Sofia Mertens
Nov 3, 2026, 5 min read

Verify Location Candidates Before You Report Them
A checklist for confirming a photo location: compare map and street imagery, check signs, language and terrain, and record how sure you are.
Elif Yildiz
Nov 1, 2026, 5 min read

Image Geolocation OSINT Guide
Upload a photo for EXIF GPS, map-style previews, and ranked city or region candidates. Learn what OsintX image geolocation returns before you spend credits.
Sofia Mertens
5 min read



