Domain Attack Surface — SSL + CT Logs + Breach History

Full domain security audit in one call: SSL/TLS, DNS, SPF/DKIM/DMARC, security headers, WHOIS, blacklist, tech stack — PLUS subdomain-takeover risk and public S3-bucket exposure detection, which no other domain-audit tool checks. Returns a 0-100 health score + fix list. No API key, no login.

Check SSL/TLS certificates for any website: expiration date, issuer, subject, hostname match (SNI), chain/authorization status, and common HTTPS misconfigurations. Useful for SEO audits, security checks, and uptime monitoring.

Check if domains or emails appear in known data breaches. Uses Have I Been Pwned database. Returns breach names, dates, data types exposed (passwords, emails, phone numbers). Monitor for new breaches affecting your organization.

Website HTTPS & SSL Health Checker

pillowy_travel/website-https-ssl-health-checker

Checks HTTPS availability and SSL certificate health for given URLs

Check email syntax, disposable and role accounts, DNS/MX, WHOIS, SSL, SPF/DMARC/DKIM, public breach metadata, and company-name guesses. Supports bulk CSV, domain, email, and username inputs. No user API key. Active PPE: $0.001 start plus $0.005 per target after five free targets.

Bulk Domain Strength Checker

searchshark/bulk-domain-strength-checker

Score and qualify domains in bulk using transparent registration age, DNS, website availability, HTTPS certificate health, indexability, and homepage SEO signals. No API keys or paid data providers required.

Domain OSINT Recon

prooflio/domain-osint-recon

Aggregates WHOIS, DNS records, certificate-transparency subdomains and PTR records for a domain into one structured report.

Subdomain Finder — Certificate Transparency (crt.sh)

bgfc97/crtsh-subdomain-finder

Discover subdomains of any domain from public Certificate Transparency logs (crt.sh). Attack-surface mapping and recon with first/last-seen dates. No key, no proxy.

Domain Vet - Domain History Health Auditor

lenient_grove/Domain-Vet-Domain-History-Health-Auditor

Domain Vet audits a domain’s history and technical health using public data. It detects spam, drops, blacklists, SSL issues, and risky past usage to deliver a clear Buy, Caution, or Pass decision.

Scan funding rates across 6 exchanges (Binance, Bybit, OKX, Gate.io, Bitget, Hyperliquid) for any token and identify cross-exchange arbitrage opportunities. Returns normalized hourly rates, annualized APR, max spread between exchanges, and ranked arbitrage pairs. No API key required.