Subdomains from certificate transparency logs with first-seen dates, services Shodan has observed on the domain’s hosts, plus ransomware claims and catalogued breach events.
This domain — or one of its subdomains — appears in malicious-indicator feeds we mirror. Each entry is what the feed reported, not something we observed ourselves.
iy1wc825fz.workers.dev172.67.146.80cdn104.21.79.149cdnOpen ports, software fingerprints and matched CVEs come from Shodan InternetDB, refreshed daily. Shodan did the scanning; we only read its index. A CVE listed here means a service banner matched a version known to be affected — not that exploitation was confirmed, and not that a backported fix is absent.
iy1wc825fz.workers.deviy1wc825fz.workers.devSubdomains from Certificate Transparency logs via Certspotter, cached for four hours. Host addresses from public DNS resolvers; open services from Shodan InternetDB, refreshed daily. Claim matches come from our own dataset. We do not scan, probe, or connect to the domain in any way.