{
  "port": 3261,
  "protocol": "tcp",
  "service": "winShadow",
  "oneLiner": "Registered to winShadow, a Windows remote-control product; almost never seen now.",
  "whatItIs": "IANA registers 3261 as `winshadow`, the port of winShadow — a commercial Windows remote-control and remote-administration package in the same family as pcAnywhere and VNC. No protocol specification was ever published and the product has no meaningful present-day deployment, so the registration is the extent of the public record. If 3261 is open, the interesting question is whether it is genuinely winShadow or something unrelated squatting on the number.",
  "exposure": {
    "verdict": "never",
    "note": "If it is remote-control software, it is a full desktop takeover path with legacy authentication — keep it off public networks and prefer a VPN plus a maintained remote-access tool."
  },
  "checkCommand": "nc -vz TARGET 3261",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}