Subdomain discovery via crt.sh Certificate Transparency logs — finds all subdomains with issued SSL certificates. Handles multiline entries, strips wildcard prefixes, deduplicates, sorted output. Discovers API endpoints, staging servers, mail servers, and forgotten infrastructure. AI agent API for attack surface mapping, bug bounty recon, subdomain enumeration, shadow IT detection, and domain takeover prevention. Accepts USDC payments on Base and Solana

Storage & Infrastructure

SSL/TLS certificate analysis — issuer (Let's Encrypt, DigiCert, Cloudflare, Comodo), SAN list, serial number, validity period, days until expiry. TLS 1.0/1.1/1.2/1.3 individual probing with OpenSSL 3.x awareness. Automated A-F grade (A=modern TLS only, F=expired/no cert). TOCTOU-safe IP pinning. AI agent API for SSL monitoring, PCI DSS compliance, expired cert detection, CA verification, and TLS auditing. Accepts USDC payments on Base and Solana

Storage & Infrastructure

Full domain intelligence — WHOIS, multi-resolver DNS, SSL/TLS certs, Wappalyzer tech detection, security header audit, CT log subdomains, redirect chain — all 7 in parallel with individual timeouts. Partial results on component failure. Weighted overall grade (SSL×2 + headers×1.5 + redirect×1). AI agent API for complete domain due diligence, M&A assessment, security posture scoring, and competitive analysis. Accepts USDC payments on Base and Solana

Storage & Infrastructure

Security header audit — 10 headers: CSP, HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection, CORP, COEP, COOP. Info leakage detection via Server, X-Powered-By, X-AspNet-Version. A-F grade (A=9-10 present, F=0-2). AI agent API for OWASP compliance, web security auditing, pentest recon, and hardening assessment. Accepts USDC payments on Base and Solana

Developer Tools

Redirect chain analysis — follows up to 10 hops (301/302/303/307/308) with per-hop timing in ms, status codes, TLS status, Server header. Detects HTTPS-to-HTTP TLS downgrade, redirect loops, excessive chains. A-F grade (A=direct/1-hop, D=downgrade, F=loop). SSRF-validated per hop via IP pinning. AI agent API for SEO redirect auditing, phishing chain analysis, URL shortener resolution, and HTTPS migration validation. Accepts USDC payments on Base and Solana

Data & Analytics

Technology stack detection via Wappalyzer (1000+ signatures) — web servers (Nginx, Apache, IIS), CMS (WordPress, Shopify, Drupal), JS frameworks (React, Vue, Angular, Next.js, Svelte), CDN (Cloudflare, Fastly, Akamai), analytics (Google Analytics, Hotjar). HTTPS with HTTP fallback. AI agent API for competitive intelligence, website profiling, lead enrichment, and tech market research. Accepts USDC payments on Base and Solana

Data & Analytics

DNS multi-resolver lookup — A, AAAA, MX, TXT, NS, CNAME, SOA across Google 8.8.8.8, Cloudflare 1.1.1.1, Quad9 9.9.9.9 in parallel. SPF mechanism parsing, DMARC policy extraction (p=reject/quarantine/none), resolver inconsistency detection (DNS hijacking/BGP leak signal). NXDOMAIN returns structured exists:false. AI agent API for DNS monitoring, email deliverability, SPF/DMARC compliance, DNS hijacking detection, and propagation checks. Accepts USDC payments on Base and Solana

Storage & Infrastructure

WHOIS registration lookup — registrar, creation/expiry/updated dates, domain age in days, name servers, DNSSEC, registrant country/org, EPP status codes. All TLDs (.com .net .org .io .dev .ai ccTLDs gTLDs). Per-field error resilience for TLD-specific parsing quirks. AI agent API for domain due diligence, brand protection, phishing domain detection, expiry alerting, and M&A research. Accepts USDC payments on Base and Solana

Data & Analytics