Every claim in this report traces back to one of 48 evidence records below. Each was captured passively during recon, hashed at capture for chain-of-custody, and graded per the Admiralty Scale (NATO STANAG 2511). Click any ev_xxx chip elsewhere in the report to jump straight to its source record.
ev_001 A-1 iqt.org registrar: Tucows Domains Inc.; registered 2003-02-16T12:48:59Z; expires 2029-02-16T12:48:59Z; transferred 2019-12-08; DNSSEC delegationSigned:false; nameservers ns1-ns4.iqt.org on AWS Route 53 (205.251.192.189 / 205.251.198.120 / 205.251.194.110 / 205.251.197.120); status: clientTransferProhibited + clientUpdateProhibited.
ev_002 A-1 iqt.org SPF: v=spf1 ip4:3.213.33.207/32 ip4:192.132.59.0/24 mx include:spf.protection.outlook.com include:_spf.salesforce.com include:spf.mandrillapp.com -all | DMARC p=reject pct=100 rua=mailto:c494f449@inbox.ondmarc.com (Red Sift OnDMARC) | MX iqt-org.mail.protection.outlook.com (Office 365) | TXT verification: MS=ms75312505, adobe-idp-site-verification, apple-domain-verification, calendly, cisco-ci, docusign, duo_sso_verification, google-site-verification, onetrust, openai-domain-verification
ev_003 B-2 In-Q-Tel (IQT), formerly Peleus and In-Q-It, is an independent American not-for-profit venture capital firm based in Tysons, Virginia. It invests in companies to keep the Central Intelligence Agency, and other intelligence agencies, equipped with the latest in information technology in support of United States intelligence capability. The corporation receives funding primarily through contracts with the CIA and other U.S. government partners, but is not owned by the CIA. The name 'In-Q-Tel' is a
ev_004 A-1 crt.sh enumeration of %.iqt.org surfaced 50+ certs and 35+ unique hostnames: iqt.org, www.iqt.org, p0, who, help, home, status, mta-sts, connect, central, assets, sso, chat, short, shorty, pki, gitlab, mattermost, docker-registry, pages (+wildcard), bitwarden, qnexus, event55, controller.ztt, origin-wf. Issuers: Amazon RSA, Let's Encrypt R13/E7/E8, Google Trust Services WE1/WR1, DigiCert (BIMI VMC with subject CN='In-Q-Tel, Inc.', serial 0bfa3097a61f3cd9bf90acf6ab3980e6).
ev_005 A-1 CertSpotter: 38 certs, 35 unique hostnames for iqt.org. Cross-SAN domains in shared Amazon RSA cert id 11372382656 (valid 2025-08-04 to 2026-09-02): bnext.org, www.bnext.org, iqtlabs.ai, www.iqtlabs.ai, iqtlabs.net, www.iqtlabs.net, iqtlabs.org, www.iqtlabs.org — strong evidence all four secondary domains are IQT-owned and operationally co-managed.
ev_006 A-2 30 historical scans of iqt.org apex. Hosting evolution: 2018 Cogent AS174 IP 38.88.248.21; 2019 AS393900 'IQT1 - In-Q-Tel, Inc.' IP 192.132.59.90; 2021-2026 multi-region AWS CloudFront + EC2 origins. Duo SSO redirect target: iqt.login.duosecurity.com via AWS Global Accelerator. Additional subdomains surfaced (not in CT): claimmapping.iqt.org (Dash/Plotly), gateway.iqt.org + ssh.a/b.gateway + rdp.a/b.gateway (Duo Network Gateway zero-trust portals).
ev_007 A-1 AS393900 'IQT1' registered with ARIN 2014-11-05T18:01:29Z. Registrant: In-Q-Tel, Inc. (handle INQTE-2), address 1800 Tysons Blvd Suite 1200, Tysons, VA 22102, US. NOC/Technical/Admin/Abuse contact: George Lewis (handle LEWIS237-ARIN), email glewis@iqt.org, phone +1-202-713-5227.
ev_008 B-2 Wikidata Q3109467: country=United States; instance of=venture capital firm + business; named after=Q + intelligence community; HQ=Arlington County (Q107126); inception=1999-01-01; official website=https://www.iqt.org/; described at URL=https://www.cia.gov/library/publications/intelligence-history/in-q-tel; legal form=nonprofit organization (Q163740); Crunchbase ID=in-q-tel; GRID=grid.503020.4; IPv6 routing prefix=2001:668:112::/47; ROR=02qp5k481; OpenAlex=I38260057.
ev_009 B-3 OpenAlex I38260057 In-Q-Tel — ROR https://ror.org/02qp5k481; GRID grid.503020.4; type=nonprofit; status=active; alternatives ['In-Q-Tel','Peleus']; acronym IQT; geo: Arlington, Virginia, US (38.89328, -77.08539); created in OpenAlex 2016-06-24. (Note: aggregate works_count is inflated by institutional-name collisions and includes unrelated medical/dentistry research erroneously attributed.)
ev_010 B-2 Geocoded 1800 Tysons Boulevard, McLean, Fairfax County, Virginia 22102, US -> lat 38.9222771, lon -77.2225183. Building tenants per OSM: Cushman & Wakefield (estate_agent), Founding Farmers (restaurant). 'Tysons' is local name for the McLean commercial district; same address.
ev_011 B-2 Geocoded 2107 Wilson Boulevard, Courthouse, Arlington, Arlington County, Virginia 22201, US -> lat 38.8930036, lon -77.0853957. Building: 'Colonial Place III', 12 levels (~49.99m). Matches OpenAlex Arlington geo for IQT.
ev_012 B-2 Gilman Louie (Q5562474, born 1960) — American technology venture capitalist and former video game designer. Co-founder and CEO of America's Frontier Fund (non-profit emerging-tech fund). Louie served as the FIRST chief executive of In-Q-Tel.
ev_013 B-2 Michael Maurice Crow (Q6832387, born 1955) — 16th president of Arizona State University since July 2002. Per Wikipedia search context: 'He is also chairman of the board for In-Q-Tel, the Central Intelligence Agency's venture capital firm. In 2024 he was elected to the American Philosophical Society.' Prior: executive vice provost Columbia University 1998-2002.
ev_014 B-2 Norman Ralph 'Norm' Augustine (Q3343742) — US aerospace businessman; United States Under Secretary of the Army 1975-1977; served as chairman and CEO of the Lockheed Martin Corporation. Chairman of the Review of United States Human Space Flight Plans Committee. Per Wikipedia In-Q-Tel article: 'Norm Augustine, a former CEO of Lockheed Martin, led the board of directors.'
ev_015 B-2 Safra Ada Catz (Q450628, born 1961, Israeli-American) — executive vice chair and former CEO of Oracle Corporation; at Oracle since April 1999; board member since 2001; co-president + CFO from April 2011; joint CEO with Mark Hurd Sept 2014; sole CEO Sept 2019. Wikipedia search context confirms: 'She also serves as a trustee of In-Q-Tel'.
ev_016 B-2 Howard Ellis Cox Jr. (Q136601430, born 1944-02-01, New York City) — American venture capitalist + philanthropist. Joined Greylock Partners 1971 and is special limited partner. 'He is on the Executive Committee of In-Q-Tel.' Activities span healthcare development and national security.
ev_017 B-2 Dan Geer (Q5213551) — American computer security analyst and risk management specialist. 'Recognized for raising awareness of critical computer and network security issues before the risks were widely understood, and for ground-breaking work on the economics of security.' Per Wikipedia: 'security officer for In-Q-Tel'.
ev_018 B-2 Anita Katherine Jones (Q9895) — American computer scientist and former US government official. 'She was Director, Defense Research and Engineering from 1993 to 1997.' Wikipedia confirms: 'on the Board of Trustees for In-Q-Tel'.
ev_019 B-2 John Seely Brown 'JSB' (Q6257227, born 1940) — American researcher specializing in organizational studies of computer-supported activities. Director of Xerox PARC 1990-2000; Chief Scientist at Xerox 1992-2002. Co-author 'The Social Life of Information' (2000). Wikipedia ref confirms 'Board of Trustees - In-Q-Tel'.
ev_020 C-2 Hunter.io domain iqt.org: 105 emails on record; pattern {f}{last}@iqt.org; org=IQT. 10 personal emails retrieved (verified valid): Brian Smith / Senior Partner DC (bsmith), Peter Bronez / Chief Data Officer (pbronez), Michael Chadwick / SVP Rapid Prototyping (mchadwick), Oliver Mayers / Director (omayers), Justin Wilder / Managing Director Partner (jwilder), Kathryn Bojack / Venture Partner (kbojack), Cameron Farley / Director System Operations (cfarley), Vesna Petkoski / Director International
ev_021 C-2 glewis@iqt.org — 5 breach corpora: DemandScience, Verifications, Adapt, Adobe, PitneyBowes.
ev_022 C-2 sbowsher@iqt.org — 9 breach corpora: DemandScience, Evite, LinkedIn, Adapt, LinkedInScrape-2021, ATT-Speculated, Twitter-Scraped, Verifications, Disqus.
ev_023 D-3 ProxyNova Compilation of Many Breaches search query '@iqt.org' returned 1 plaintext credential pair: linda@iqt.org:2483000q.
ev_024 B-2 glewis@iqt.org -> status=valid, score=100, regexp=true, gibberish=false, disposable=false, webmail=false, mx_records=true, smtp_check=true, accept_all=false; result=deliverable. Sourced from community.glintinc.com (Glint employee feedback platform).
ev_025 B-2 sbowsher@iqt.org -> status=valid, score=91, smtp_check=true, deliverable. Confirms current IQT mailbox for CEO Steve Bowsher.
ev_026 B-2 cdarby@iqt.org -> status=invalid, score=0, smtp_check=false; result=undeliverable. Confirms Chris Darby (former IQT CEO) email no longer active — consistent with Dec 2023 succession to Steve Bowsher.
ev_027 B-2 dgeer@iqt.org -> status=valid, score=88, smtp_check=true, deliverable. Confirms Dan Geer (IQT CSO) mailbox still active.
ev_028 A-2 GitHub org IQTLabs: 89 public repositories. Top by stars: SkyScan (419) drone-detection ADS-B; software-supply-chain-compromises (130) public dataset; gamutRF (81) SDR scanner; CRviz (60) network viz; packet_cafe (59); snowglobe (56) LLM wargames; BirdsEye (52) RF localization; AISonobuoy (46) maritime; FakeFinder (46) deepfake detection; RFClassification (45); Daedalus (44) 5G defense; squiggle (42); pypi-scan (37); Ukraine_Geolocation (13). Most repos archived (post-2024 lab pivot).
ev_029 A-1 Current resolution: gitlab.iqt.org -> lb-a-gitlab-1357a76da111c14b.elb.us-east-1.amazonaws.com -> 10.204.156.85 (internal AWS ELB, RFC1918). sso.iqt.org -> dr2xgmtj4vrnb.cloudfront.net -> 13.249.205.{12,25,116,95}. gateway.iqt.org -> NXDOMAIN. bitwarden.iqt.org -> internal-bitwarden-iqt-org-internal-915424464.us-east-1.elb.amazonaws.com -> 10.205.222.{121,49,94} (internal RFC1918). pki.iqt.org -> ddwe3i1in06t0.cloudfront.net -> 18.161.170.{10,49,83,110}. www.iqt.org -> cdn.webflow.com -> 198.202
ev_030 A-1 bnext.org RDAP — registrar eNom LLC (IANA 48); registered 2016-12-22; expires 2026-12-22; ns1/2/3.iqt.org (same as iqt.org); status active; DMARC rua=c494f449@inbox.ondmarc.com (shared Red Sift OnDMARC reporting with iqt.org); MS=ms23587203 (separate Office 365 tenant from iqt.org's ms75312505); MX bnext-org.mail.protection.outlook.com.
ev_031 A-1 iqtlabs.ai RDAP — registrar Key-Systems GmbH (IANA 269, Germany); registered 2023-05-12; expires 2027-05-12; ns1/2/3.iqt.org. Registrant/Tech/Admin: George Lewis, In-Q-Tel, 2107 Wilson Blvd Suite 1100, Arlington VA 22201 US, support@iqt.org, +1.2027135227. This .ai TLD registration leaks the full contact (Identity Digital does NOT redact like PIR/Tucows do for .org).
ev_032 A-1 iqtlabs.org RDAP — registrar Tucows Domains Inc (IANA 69); registered 2020-12-14; expires 2026-12-14; ns1/2.iqt.org; SOA ns1.iqt.org hostmaster.iqt.org; SPF v=spf1 -all (NO outbound mail); DMARC p=reject; MX=0 (none).
ev_033 B-2 Wikidata reverse-lookup for entities whose Wikidata property links back to Q3109467 (In-Q-Tel): investor relationship — Palantir Technologies (Q2047336), Mapbox (Q17068357), JuliaHub (Q56027522), Starcloud (Q137690980); funder relationship — Plotly (Q17146476), Cortical Labs (Q133306496), SafeWeb (Q138605478), Nucleus Security (Q138975894); employer relationship — Benjamin D Lee (Q60985287), Dylan B George (Q93063823).
ev_034 A-1 SEC EDGAR full-text search 'In-Q-Tel, Inc.' on S-1/S-1A forms 2022-01-01 to 2026-05-27 returned 17 filings across 4 companies: Nauticus Robotics (CIK 0001849820, ticker KITT, 5 S-1/As 2022-2023, Webster TX, underwater robotics); Exyn Technologies (CIK 0001960355, ticker EXYN, 7 S-1/As 2026, Philadelphia PA, autonomous aerial robotics); Rigetti Computing (CIK 0001838359, ticker RGTI, 3 S-1/As 2022, Berkeley CA, quantum); D-Wave Quantum (CIK 0001907982, ticker QBTS, 2 S-1/As 2022, Burnaby BC + Pal
ev_035 A-1 GovInfo collection=CRPT or CHRG, query 'In-Q-Tel': 108 documents. Recent: CHRG-119shrg61986 (DOD Auth FY2026 hearing, 2025-04-09); CHRG-119shrg62948 (Defense Innovation and Acquisition Reform, 2025-01-28); CRPT-118srpt181 (Senate Intelligence Authorization Act FY2025, 2024-06-12); CHRG-118hhrg56421 (Danger China Poses to American Agriculture, 2024-03-20); CRPT-118srpt81 (DOD Appropriations 2024); CHRG-118hhrg52380 (Future of War, 2023-02-09).
ev_036 A-1 FederalRegister.gov exact-phrase search 'In-Q-Tel' returned 3 documents: (1) FR 2024-19524 NTIA RFC Bolstering Data Center Growth Resilience and Security (2024-09-04) — cites IQT Workshop on Cloud Data Centers and Great Power Competition (Nov 2023). (2) FR 2025-03602 FCC NPRM Facilitating Opportunities for Advanced Air Mobility (2025-03-17) — 'Black Sage Technologies and In-Q-Tel supported Echodyne's petition' for radiolocation operations 24.45-24.65 GHz band UAS detection. (3) FR 02-10955 NIST
ev_037 A-1 CourtListener verified hits for 'In-Q-Tel': (1) Demodulation Inc. v. United States 103 Fed. Cl. 794 (2012-02-29, Judge Braden, docket 11-236C) — microwire detection IP/trade-secrets case vs US gov't. (2) Basis Technology Corp. v. Amazon.com Inc. 71 Mass. App. Ct. 29 (2008-01-07, Judge Sikora) — midtrial settlement enforceability. (3) VirnetX Inc. v. Apple Inc. 925 F. Supp. 2d 816 (2013-02-26, E.D. Tex., Judge Davis, docket 6:10-CV-417) — patent damages. (4) Hobbs v. St. Martin 320 F. Supp. 3d 74
ev_038 A-2 urlscan.io task.domain:bnext.org returned 1 scan: covid-19-search-diagnostics-db.bnext.org (2020-07-31), nginx, AWS EC2 us-east-1 IP 34.206.208.62, status 200, TLS Amazon-issued cert valid from 2020-07-30. Confirms B.Next operated a COVID-19 search/diagnostics database in 2020 — IQT biosecurity / pandemic-response footprint.
ev_039 B-2 Wikipedia NGA article: 'Keyhole investment: NGA contributed approximately 25% of In-Q-Tel's funding of Keyhole Inc, whose Earth-viewing software became Google Earth' — establishes NGA (not just CIA) as a co-funder of specific IQT investments; IC multi-agency pooling via IQT confirmed.
ev_040 B-2 Palantir Wikipedia: 'In its early years, Palantir maintained founder control by declining to offer board seats to investors, including In-Q-Tel.' Per Wikipedia DOGE article (Wired/Makena Kelly cite): 'Palantir Is Helping DOGE With...' — Palantir (IQT's earliest funded portfolio company, 2003) now actively contributing to Trump administration Department of Government Efficiency.
ev_041 B-2 VT for 198.202.211.1: AS 209242 Cloudflare London LLC (RDAP says Webflow Inc.); network 198.202.211.0/24 WEBFL allocation; registrant org Webflow Inc, 398 11th St 2nd Floor San Francisco CA 94103. Last HTTPS cert subject CN=fallback.tls.fastly.net (Fastly-fronted). 1 malicious (Lumu), 33 undetected, 57 harmless. Reputation -13.
ev_042 B-2 VT for 108.138.64.31: AS 16509 Amazon.com Inc; network AMAZON-CF 108.138.0.0/15 (Amazon CloudFront allocation); reputation 0; 35 undetected + 56 harmless; 0 malicious.
ev_043 A-2 GreyNoise community 108.138.64.31: noise=false, riot=true, classification=benign, name='Amazon CloudFront', last_seen=2026-05-27.
ev_044 A-2 Wayback Machine confirms iqt.org archived; most recent snapshot 2026-05-11T17:39:14Z, status 200.
ev_045 A-2 Wayback CDX for iqt.org: 100+ snapshots; earliest 2002-01-11T04:36:53Z (iqt.org:80/, status 200). Notable historic URLs: /10gen-announces-strategic-investment-from-iqt/ (pre-2013 MongoDB), /3vr-security-inc-announces-strategic-investment-and-development-agreement-with-in-q-tel/ (3VR Security portfolio), /908-devices-and-iqt-enter-strategic-partnership-to-develop-new-mass-spectrometry-analyzers/ (908 Devices portfolio).
ev_046 A-2 RIPEstat for 192.132.59.0/24: is_less_specific=false; announced=false; asns=[]; type=prefix; parent block=192.0.0.0/8 IANA IPv4 Address Space Registry. Confirms the historic IQT range is NOT currently announced — IQT has fully migrated infrastructure off this prefix to AWS hosting.
ev_047 C-2 HudsonRock Cavalier domain iqt.org: total_stealers (corpus-wide) 35,384,184; employees=0, users=0, third_parties=0, applications=[], anti-viruses=0. No infostealer compromises linked to iqt.org.
ev_048 B-2 ipapi.com lookup 3.213.33.207 (in IQT SPF ip4: allow-list): country=US, region=TX, city=Dallas, lat=32.7797, lon=-96.8022, ISP=Latitude.sh, AS=AS396356 Latitude.sh. Indicates the SPF allow-list includes a Dallas-based bare-metal cloud sender (likely Mandrill / outbound transactional mail relay rather than AWS).
No evidence matches the current filters.