// EVIL-DB · ANNIVERSARY DOSSIER · DECLASSIFIED_
ONEYEAR
From a scrappy FastAPI prototype to a 0-threat intelligence platform — hunting the internet's worst, every day for 365 of them.
THE NUMBERS
WHAT WE CAUGHT
THE ORIGIN STORY
- JUN 19, 2025
Born as “EvilWatch”
A scrappy FastAPI + SQLite backend with a Next.js frontend, enriching threats through NeutrinoAPI. The first commit lands at 19:21 UTC — 6 seconds before the repo even existed on GitHub.
- DEC 7, 2025
The great rewrite
Rebuilt from the ground up: FastAPI → Next.js App Router, raw sqlite3 → Prisma, NeutrinoAPI → AbuseIPDB / ip-api / Shodan. The platform Evil-DB runs on today.
- APR–JUN 2026
CVE intelligence
NVD 2.0 + EPSS + CISA KEV land — 356K CVEs with exploit-prediction scoring, wired into the threat graph. The chunkiest feature of the year.
HALL OF INFAMY
21,888 reports — the single most-reported indicator in the database.
Splunk Enterprise Missing Authentication for Critical Function Vulnerability
scored EPSS ≥ 0.90 — vulnerabilities almost certain to be exploited in the wild.
BEHIND THE DOSSIER
One operator. Two repositories. A whole lot of late nights.
Here's to year two.
Same mission, more threats, faster lookups. Thanks for being part of it.
// END OF FILE