slugify

Wildcard DNS check: resolves a random non-existent subdomain to see whether the zone answers everything (wildcard record), which affects subdomain enumeration, email catch-all behaviour and phishing risk. $0.01 per domain.

Typosquat finder: generates the most likely typo, transposition, omission, doubled-letter, homoglyph and TLD-swap variants of a domain (up to 40) and checks which ones currently resolve. Brand protection and phishing-domain monitoring. $0.01 per domain.

DNS change detection: snapshots a domain's A, AAAA, MX, NS, TXT and CAA records, compares with the snapshot from your previous call (kept 90 days) and reports which record types changed. Call it on a schedule to get DNS hijack and misconfiguration alerts. $0.01 per check.

Tor exit node check: whether an IPv4 address is a current Tor exit, from the Tor Project's published exit list (cached one hour). Fraud screening, abuse triage and access policy decisions. $0.01 per IP.

Email list hygiene report for up to 50 addresses in one $0.01 call: duplicates, invalid syntax, disposable domains, role addresses, free-webmail share, domains without MX, and a keep / review / remove split. Clean a signup or CRM list before sending.

DMARC record parser and validator: paste any DMARC TXT string and get the policy, subdomain policy, percentage, report addresses, alignment modes, whether it enforces, and warnings for common mistakes (p=none, missing rua, pct under 100, unknown tags). $0.01 per record.

IP to country: the country an IPv4 address is registered to, from the regional internet registry (via Team Cymru and RDAP), with ASN context. Honest about what it is: registry data, not precise geolocation, and free of any keyed geo-IP database. $0.01 per IP.

Cloud / hosting provider detection for an IP or hostname: AWS, Google Cloud, Azure, Cloudflare, DigitalOcean, Hetzner, OVH, Akamai/Linode, Fastly, Oracle, Alibaba, Vultr, Fly.io, Render and others, from the announcing ASN, plus a CDN flag. Where is this service hosted? $0.01 per lookup.

Catch-all mailbox hint (no SMTP probing): estimates whether a domain accepts mail to any address, from provider defaults (Google Workspace/Microsoft 365 usually reject unknown users; many small hosts and Cloudflare Email Routing accept all), wildcard DNS and MX shape. Helps interpret 'deliverable: likely' results. $0.01 per domain.

Mail provider detection for a domain: the primary inbound provider from MX (Google Workspace, Microsoft 365, Proofpoint, Zoho, Proton, iCloud, GoDaddy, IONOS...) and the sending services authorised in SPF (SendGrid, Mailchimp, Salesforce, Zendesk, HubSpot, Marketo...). Vendor intelligence and deliverability context. $0.01 per domain.

ASN lookup: the name, country, regional registry and allocation date of an autonomous system (Team Cymru), plus the RDAP record with the owning organization. Identify who operates a network number seen in logs or BGP data. $0.01 per ASN.

IPv6 readiness check for a domain: AAAA records for the site, IPv6 on its mail exchangers and on its nameservers, and whether it is dual-stack. Compliance and modernization audits. $0.01 per domain.

IP address validator: tells you whether a string is a valid IPv4 or IPv6 address, which version, the normalized form and its classification (public, private, loopback, link-local, multicast...). Input validation for forms, logs and APIs. $0.01 per check.

Is this IP a CDN or reverse proxy? Detects Cloudflare, Akamai, Fastly, CloudFront, Imperva/Incapsula, Sucuri, StackPath, Bunny, KeyCDN, Gcore and others from the announcing network, so you know whether an address is the origin server or an edge. $0.01 per lookup.

Subnet splitter: divide an IPv4 CIDR block into equal subnets of a smaller prefix (e.g. a /22 into /24s), listing up to 256 resulting networks with counts. VPC and VLAN planning. $0.01 per split.

Sitemap freshness: loads the site's sitemap (index expanded, up to 5 child maps), counts URLs, finds the newest and oldest lastmod dates, how many URLs changed in the last 7 and 30 days, and, when called repeatedly, how many URLs were added or removed since your previous call (kept 90 days). Content-velocity monitoring for competitors and clients. $0.01 per check.

SSL/TLS certificate expiry check for a hostname: issuer, common name, SANs, valid-from and valid-to dates, days until expiry and whether it is valid now, from public certificate-transparency logs, plus whether the site currently answers over HTTPS. Certificate expiry monitoring and alerts. $0.01 per host.

Is this website up? URL status check: reachable or not, HTTP status code, response latency in milliseconds, number of redirects, final URL and any connection or TLS error. Lightweight uptime probe and dead-link checker for monitoring and link validation. $0.01 per URL.

WHOIS / RDAP domain registration lookup: registrar, creation (registration) date, expiry date, last updated, EPP status codes and nameservers, returned as clean JSON from the authoritative RDAP source. Domain age and ownership research, expiry monitoring, due diligence. $0.01 per domain.

Website uptime, availability and SSL/TLS certificate check: is the site up, HTTP status, response latency, full redirect chain and final URL, server header, HTTPS and security headers (HSTS, CSP, X-Frame-Options), plus the latest public TLS certificate from certificate-transparency logs with issuer, validity dates and days until expiry. Monitoring, SSL expiry alerts and health checks for any hostn

How many pages does a site declare? Counts URLs across sitemap.xml and any sitemap index (up to 5000 counted), reports sitemaps visited and newest lastmod. A fast estimate of site size. $0.01 per site.

security.txt reader (RFC 9116): fetches /.well-known/security.txt (and the legacy /security.txt), parses Contact, Policy, Expires, Encryption, Acknowledgments, Preferred-Languages and Canonical, and flags an expired file. Find the right way to report a vulnerability. $0.01 per domain.

Well-known file scan: checks 37 standard URLs on a domain (robots.txt, sitemap.xml, security.txt, ads.txt, llms.txt, openapi.json, manifest, openid-configuration, apple-app-site-association, assetlinks, webfinger, nodeinfo, agent.json, ai-plugin.json, matrix, did.json, feeds...) and reports which exist. Fast site reconnaissance. $0.01 per domain.

Tracker and analytics detection on a page: Google Tag Manager, GA4/UA, Meta Pixel, Hotjar, Clarity, HubSpot, Segment, LinkedIn Insight, TikTok, Pinterest, Intercom, Mixpanel, Amplitude, Sentry, consent managers, Google Ads and more, with the IDs where visible. Privacy audits and competitive tooling research. $0.01 per page.

WordPress detection and fingerprint: is the site WordPress, the version from the generator tag or feed, the active theme and plugins visible in HTML paths, whether the REST API (/wp-json) and XML-RPC are exposed, and the login page presence. Security and sales research. $0.01 per site.

Third-party script inventory: every external domain a page loads scripts, styles, frames or images from, grouped by host with counts and categorised (analytics, ads, CDN, fonts, social, chat, payments). Privacy review and supply-chain risk in one call. $0.01 per page.

Readability of a page's text: Flesch Reading Ease, Flesch-Kincaid grade level, average sentence length, syllables, word and sentence counts, difficulty label and reading time. Content quality and audience-fit checks. $0.01 per page.

Document link finder: every link on a page to PDF, Word, Excel, PowerPoint, CSV, ZIP or other downloadable files, with anchor text and file type counts. Find reports, whitepapers and datasets fast. $0.01 per page.

URL uptime history: checks the URL now and keeps the last 50 checks (status, latency, up/down) per URL across your calls, returning uptime percentage and average latency over the stored window. A tiny status log you build by calling on a schedule. $0.01 per check.

Price extraction from a page: every currency amount in the text and in schema.org/Open Graph price tags, with currency, numeric value, min/max, and product price hints. Price monitoring and catalogue scraping. $0.01 per page.

Link preview card data (unfurl): the best title, description and image for a URL from Open Graph, Twitter Card, schema.org and the page itself, with site name, favicon, canonical URL, type and image validation. Everything a chat app or feed needs to render a link card. $0.01 per URL.

Sitemap URL list: fetches sitemap.xml (or the URL you give), expands sitemap indexes up to two levels, and returns the page URLs (up to 500 shown), total count, sitemaps visited and lastmod range. Crawl planning and site inventory. $0.01 per site.

OpenAPI / Swagger discovery: probes the common spec locations (/openapi.json, /swagger.json, /api-docs, /v1/openapi.json, /.well-known/openapi.json...) and any link on the homepage, then summarises the spec: title, version, server URLs, path and operation counts, tags. Find a site's machine-readable API. $0.01 per site.

Page weight and resource inventory from the HTML: document bytes, script/stylesheet/image/iframe/font counts, inline script bytes, external hosts contacted, and a simple heaviness verdict. A quick performance smell test without a browser. $0.01 per page.

Reading time and word count for a page: words, characters, paragraphs, estimated reading time at 238 wpm and speaking time at 150 wpm. Lightweight content sizing for feeds and summaries. $0.01 per page.

Redirect audit for a domain: how http://, https://, www and apex variants each resolve, where they end, hop counts and status codes, and whether all four converge on a single canonical HTTPS URL. Catch split traffic and SEO dilution. $0.01 per domain.

Title and description change detection: records a page's title and meta description on each call and tells you when either changes compared with your previous call (kept 90 days). Catch rebrands, hijacks and SEO edits. $0.01 per check.

Web application firewall detection: signs of Cloudflare WAF, AWS WAF, Akamai Kona, Imperva, Sucuri, F5 BIG-IP, Barracuda, Fortinet, ModSecurity and others from response headers, cookies and block-page behaviour on a probe request. Know what stands in front of an app. $0.01 per site.

HTML tables to JSON: every table on a page as arrays of rows (header row detected, cells cleaned of markup), with row and column counts and a caption. Pull structured data out of any web page. $0.01 per page.

Validate email address: checks syntax, whether the domain exists and accepts mail (MX records), disposable or temporary email domains, role addresses (info@, admin@), free webmail providers and SPF/DMARC presence, then returns deliverable / risky / undeliverable with the reason. Email validation for signups, lead lists and CRM cleaning, no API key. $0.01 per address.

Find a company's social media profiles from its website: Twitter/X, LinkedIn, Facebook, Instagram, YouTube, GitHub, TikTok, Discord and Telegram links discovered on the homepage, plus any contact email addresses found. Lead enrichment and company research from a domain. $0.01 per site.

Open Graph and Twitter Card extractor: og:title, og:description, og:image (with resolved URL), og:type, og:site_name, og:url, og:locale, article dates, plus twitter:card/site/creator/image. Exactly what a share preview will show. $0.01 per page.

robots.txt fetched and parsed: every user-agent group with its allow/disallow rules and crawl-delay, declared sitemaps, and whether the file exists at all. Understand a site's crawl policy before fetching it. $0.01 per site.

DNS AAAA record lookup: resolve a domain name to its IPv6 addresses with TTL and DNSSEC validation flag. Tells you whether a site is reachable over IPv6. $0.01 per lookup.

JSON validator and formatter: parses the text, reports the error with position if invalid, otherwise returns pretty-printed and minified versions, the top-level type, key count, depth and size. Fix agent-generated JSON fast. $0.01 per call.

Phone number extraction from a page: candidate numbers found in the text and tel: links, normalised, with the tel-link ones marked as high confidence. Contact discovery for lead lists. $0.01 per page.

Bulk IP enrichment: up to 20 IPv4 addresses in one $0.01 call, each with public/private classification, ASN and owner, country, reverse DNS and cloud provider. Enrich a log or firewall export at a twentieth of the per-IP price.

Heading structure audit: all H1-H6 with text, H1 count (should be one), skipped levels, empty headings, and the outline as a tree. Fix on-page SEO and accessibility structure. $0.01 per page.

hreflang map: every language and region alternate a page declares (link rel=alternate hreflang), the x-default, and consistency checks (self-reference present, duplicates). See which markets a site serves. $0.01 per page.

DNS hosting provider detection: who hosts a domain's DNS (Cloudflare, AWS Route 53, Google Cloud DNS, Azure, NS1, GoDaddy, Namecheap, DNSimple, Hurricane Electric, Vercel...) from its nameservers, including multi-provider setups. Infrastructure research and migration planning. $0.01 per domain.