diff --git a/sites/intelsight.io.md b/sites/intelsight.io.md
new file mode 100644
index 0000000..f63fef1
--- /dev/null
+++ b/sites/intelsight.io.md
@@ -0,0 +1,91 @@
+# IntelSight.io — Site Documentation
+
+## Overview
+
+| Detail | Value |
+|---|---|
+| Domain | intelsight.io |
+| Aliases | intelsight.co (redirect), www.intelsight.io |
+| Platform | WordPress (CloudPanel CE) |
+| Server | app3 (152.53.241.111) |
+| Panel | panel.itpropartner.com |
+| Created | July 26, 2026 |
+| SSL | Let's Encrypt via CloudPanel |
+
+## Cloudflare DNS Records (Zone: `4c2ade01f77efc5a3821dc64f5cf3277`)
+
+| Type | Name | Value | Proxy |
+|---|---|---|---|
+| A | intelsight.io | 152.53.241.111 | ✅ Orange |
+| A | my.intelsight.io | 152.53.241.111 | ✅ Orange |
+| CNAME | www.intelsight.io | intelsight.io | ✅ Orange |
+
+SSL/TLS mode: Full (strict)
+
+### intelsight.co (Zone: `f12f30677b754b39c51a8bd29527ca8f`)
+
+| Type | Name | Value | Proxy |
+|---|---|---|---|
+| A | intelsight.co | 192.0.2.1 | ✅ Orange |
+
+**Page Rule:** `intelsight.co/*` → `https://intelsight.io/$1` (301, active)
+
+No origin server needed — Cloudflare edge handles the redirect. The dummy A record is required for DNS resolution; traffic never reaches the origin IP.
+
+## CloudPanel Site Details
+
+- **Site User (SSH):** `intelsight` / `LoveMyBoys.1520!`
+- **Home directory:** `/home/intelsight`
+
+## Database
+
+| Detail | Value |
+|---|---|
+| Host | 127.0.0.1 |
+| Port | 3306 |
+| Database | intelsight |
+| User | intelsight |
+| Password | lUO7FjpYRxdJyK7BadiW |
+
+## WordPress Admin
+
+- **URL:** https://intelsight.io/wp-admin/
+- **User:** ippadmin
+- **Password:** LoveMyBoys1520!
+- **Admin Email:** admin@intelsight.io ⚠️ **Needs changing** to `info@itpropartner.com` (CloudPanel ignores the form field and auto-generates `admin@domain`)
+
+## Service Status
+
+| Service | Status | Notes |
+|---|---|---|
+| intelsight.io | ✅ Live | WordPress default install |
+| intelsight.co → intelsight.io | ✅ Redirecting | 301 via Cloudflare page rule |
+| my.intelsight.io | ⏳ DNS ready | **No site created yet** — returns 525 |
+| SSL | ✅ Issued | Let's Encrypt via CloudPanel |
+
+## SSL Issuance
+
+Let's Encrypt via `clpctl lets-encrypt:install:certificate`. Must temporarily unproxy DNS records for HTTP-01 validation, then reproxy:
+
+```bash
+# Unproxy
+curl -s -X PATCH "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/dns_records/$RECORD_ID" \
+  -H "Authorization: Bearer $CF_TOKEN" \
+  -d '{"proxied":false}'
+
+# Issue cert (on app3)
+ssh root@152.53.241.111 "clpctl lets-encrypt:install:certificate --domainName=intelsight.io"
+
+# Repoxy
+curl -s -X PATCH "..." -d '{"proxied":true}'
+```
+
+## Backup
+
+Covered by app3 daily backup at 3 AM ET → `s3://hermes-vps-backups/cloudpanel-backups/`
+
+## Next Steps
+
+1. Change WordPress admin email from `admin@intelsight.io` to `info@itpropartner.com`
+2. Create WordPress site at `my.intelsight.io` for the customer portal
+3. Install WordPress theme and configure branding