I'm sure they mean well, but I'd highly recommend to every user to be very careful about using services like this. Do you know whether you can trust them? Is t

I'm sure they mean well, but I'd highly recommend to every user to be very careful about using services like this. Do you know whether you can trust them? Is their operations mature enough for handling the attacks they are guaranteed to receive? After all, a system receiving requests by folks suspecting they are vulnerable, makes a highly attractive target itself. In fact, I wouldn't be surprised if we see services of this kind provided by malicious actors. Really, people should just update, or only use offline tools for analysis and mitigation like [1] which they can audit and run locally. [1] https://github.com/jerrinot/log4shell-ldap/ https://github.com/jerrinot/log4shell-ldap/