Skip to content
  • There are no suggestions because the search field is empty.

Entity Search

Entity Search is the best way to search within our indexed document collection for Emails, Cryptocurrency, Credit Cards, CVEs, Website Mentions, IP Addresses, Users, and Social Security Numbers. Additionally, all Entity Searches can easily become Search Blocks, with Set Up Monitors options, by clicking on the Search Block icon on the upper right. You can enter one or more values in each builder, using space, comma, or semi-colon between values. Pressing Enter will execute the search.

  • Emails supports searching for individual addresses, domains, or subdomains.  

Entity Search 1

  • Credit Cards supports searching for individual addresses or BINs. 

Entity Search 2

  • Cryptocurrencies supports searching for the following types: Bitcoin, Ethereum, Monero, Litecoin, Dash, ZCash. The types have been validated by DarkOwl Vision. Please contact support if you are interested in additional wallet types not in this list.  
  • CVEs supports searching for the following formats: 
    • By full CVE-ID, i.e. CVE-2025-12345 (finds specific known CVE, using the CVE prefix) 
    • By CVE-ID, i.e. 2025-12345 (finds specific known CVE, without the CVE prefix) 
    • By Year only, i.e. 2025 (finds all CVEs from that year) 
  • IP Addresses supports searching for the following formats: IPv4, IPv6/IPv6 compressed, and CIDR ranges for both IPv4 and IPv6. 

A note about IP Addresses: When we extract IP addresses in the text of a document, we store them as an IP address object rather than a string (all of our other tokenized entities are strings). This allows for more search flexibility, such as searching for CIDR ranges. However, since the IP address being searched is not a string/text, they are not able to be highlighted when searching this way. 

  • Social Security Numbers supports the following format: 123-45-6789 (with hyphens).
  • Website Mentions search for mentions of websites within our data, including subdomains and results in which a domain is within a URL.

A note about Website Mentions: When using the Website Mention Entity Search with the example value darkowl.com, all of the following would be considered matches in the result set:

  • darkowl.com
  • vision.darkowl.com
  • darkowl.com/blog
  • hxxps[:]//darkowl[.]com
  • Users (available in the Research: All Sources section) supports searching for usernames across Discord, Telegram, Forum, and enhanced Market sources.
  • Vendors (available in the Research: Markets section) supports searching for vendor usernames across enhanced Market sources.