Download IntelX stealer-log archives by system UUID or storage ID and review credentials in OsintX.
IntelX on OsintX downloads stealer-log and leak exports as plain text, then parses credentials, URLs, and software tags inside the dashboard. Use a system UUID from intelx.io metadata or a storage ID plus bucket for archived stealer corpora.
Instead of juggling zip files locally, you get parsed credential counts, domain groupings, unique email totals, and searchable rows inside OsintX. Large exports that would take hours to grep manually become filterable tables in minutes.
Inputs
- System ID: UUID shape from IntelX (dashboard IntelX tab or API)
- Storage ID + bucket: e.g. stealer-logs, pastes, darknet (Enterprise tier)
What the export contains
Exports are line-oriented text: URL, USER, PASS, cookie blocks, and host metadata. OsintX groups credentials by domain, masks secrets in the UI, and lets you filter before copying or downloading a redacted export.
[system] stealer-log export (redacted) ------------------------------------ URL: https://••••••.com/login USER: █████@example.com PASS: •••••••• SOFT: Edge / Win11 ... UUID: 00000000-0000-0000-0000-000000000000
248
Credentials
31
Unique emails
18
Domains
Parsed workspace view
After download, the IntelX workspace shows credential count, unique emails, and expandable domain groups. Empty or invalid UUIDs return a clear error without charging API credits on failed parses.
API and limits
- Dashboard: daily IntelX quota on Enterprise (admin can override)
- API v1: POST /api/v1/search with type intelx returns a text attachment; billed per successful export
