Subdomain Takeover Risk Scanner

Subdomain Finder — Certificate Transparency (crt.sh)

bgfc97/crtsh-subdomain-finder

Discover subdomains of any domain from public Certificate Transparency logs (crt.sh). Attack-surface mapping and recon with first/last-seen dates. No key, no proxy.

Subdomain Finder & Recon Tool

andok/subdomain-finder

Discover subdomains for any target via passive OSINT sources. Ideal for security bug bounties and attack surface mapping.

DNS Lookup – Bulk DNS Records, MX, SPF & DMARC Checker

gazidev/bulk-dns-lookup

Bulk DNS lookup for thousands of domains: A, AAAA, MX, NS, TXT, CNAME, SOA, CAA records, SPF checker with 10-lookup limit, DMARC policy & rua, DKIM selectors, MTA-STS, BIMI, reverse DNS, change monitoring. Pick resolver: 1.1.1.1, 8.8.8.8 or custom. $1 per 1,000 domains.

🛡️ Subdomain Finder, Attack Surface & SSL OSINT Scanner

unrivaled_fortress/ssl-certificate-checker

SSL Labs-style certificate inspector: paste domains, get issuer, validity dates, days-to-expiry, SANs, TLS version, cipher and a security grade (A+→F) for every host. No API key, no proxy.

Xing Scraper

mlg14/xing-scraper

Scrape public Xing jobs by keyword, location, date or saved search URL. Export job titles, employers, locations, pay, application links and full descriptions.

Automation workflows need to convert varied native-text or scanned invoices into consistent accounting-ready line items while detecting uncertain fields and arithmetic mismatches before downstream import.

Subdomain Discovery API

crawland/subdomain-discovery-api

Paginated subdomain enumeration for any registered domain — DNS records, registrar, WHOIS, vendor reputation, and category labels per subdomain, served from the Crawland threat-intelligence backend.

Domain WHOIS Lookup (RDAP): Dates, Registrar, NS | $1/1K

one_dollar_store/domain-whois-rdap-lookup

$1 per 1,000 results, platform usage included. Registration data for a list of domains from the registries' official RDAP servers: registrar, created, updated and expiry dates, status, name servers and DNSSEC. Owner details only where the registry shows them.

Compare old and new podcast RSS feeds for lost episodes, changed GUIDs, and migration redirect mistakes. Get actionable findings before or after switching hosts.

Search GitHub repositories and users/organizations with the official REST API. Get topics, stars, forks, languages, last push, license and organization profile. No email extraction. Works without a token.