shodan.io

Observed 2026-07-13T00:06:37.861102770+00:00 (18h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byGoogle Workspace

Secured byGoogle Trust Services

Also usesGoogle Search Console

IPv6 · cybersecurity_expanded

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat shodan.io actually stands on - every host below is a signed observation

shodan.io

A / AAAA

104.18.12.238104.18.13.2382606:4700::6812:cee2606:4700::6812:dee

Cloudflareserves the site

ed.ns.cloudflare.comlady.ns.cloudflare.com

cloudflare.comanswers its DNS

aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.com

Google Workspacereceives its email

TLS

shodan.io

Google Trust Servicesissued its certificate

DNS Records

A 2

104.18.12.238
104.18.13.238

AAAA 2

2606:4700::6812:cee
2606:4700::6812:dee

MX 3

1aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com

TXT 5

MS=87251D03D1B817A70CC370D9FF17FFB7325A0110
anthropic-domain-verification-cyb4ft=VdpzeWyM37LWIDAxqDIT4vAV0
google-site-verification=BzXlMuKdXSAiX3v-VUo-M_ZZ1VPW3cwptvaIOWWGQ7c
v=spf1 ip4:216.117.2.180 ip4:69.72.37.146 include:_spf.google.com -all
v=DMARC1; p=none; rua=mailto:devops@shodan.io; aspf=r;

NS 2

ed.ns.cloudflare.com
lady.ns.cloudflare.com

SOA 1

ed.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common Name	Issuer	Expires
`shodan.io`	C=US, O=Google Trust Services, CN=WE1	Fri, 18 Sep 2026 10:18:31 +0000
`WE1`	C=US, O=Google Trust Services LLC, CN=GTS Root R4	Tue, 20 Feb 2029 14:00:00 +0000
`GTS Root R4`	C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA	Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for shodan.io. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/shodan.io">
  <img src="https://domaindrift.io/badge/shodan.io.svg"
       width="300" height="64" alt="DomainDrift signed observations for shodan.io">
</a>

Ed25519 Receipt

Receipt ID: f388fc25-a8a4-488e-a7ad-424ca84a2c16
Output Hash: 3aa7d101b23b905b12bdb8e7fbcd91b1c43d49bb64de43f0332f10d3d06ddc25
Signature: ed25519:8785751ba9618d939734857fa0b14c9b2fd5dd88eea1305102d8f07a85a90a7af233e30274f78e97b9e11646b5b650a6e2194ffc1c27bc13b33cb82b64431d01
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/shodan.io