All projects matching “tls”

Domain intel bundle: DNS records (A/AAAA/MX/NS/TXT/CAA/CNAME), RDAP registration (registrar, created/expires, status, nameservers) and TLS certificate (issuer, days left) in one call.

Is this domain malicious or named by ransomware? Domain threat check. $0.02 USDC on Base per call. Matches the hostname, parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day IOC feed and looks up ransomware leak-site claims. Returns one verdict: listed, claimed, listed_and_claimed or no_known_threat. Don't use this for many domains; use /v1/bulk-threat-check.

Builder tool for agents: FREE GET /product/bazaar-check.json?url= → indexed yes/nein + issues_found count (teaser). PAID GET/POST /product/bazaar-check/report.json?url= ($0.05 USDC Base) → 402 header compliance, extensions.bazaar schema validation, CDP quality fields, concrete Fix-JSON. Fail-soft. English-first. Brand: geld machen.

SSL/TLS certificate check: expiry, issuer, SANs, chain validity, hostname match, negotiated protocol/cipher, and weak-algo warnings for a public HTTPS host. Clean JSON.

OrionCMD Checks: Certificate status from CT logs + live HTTPS probe. Issuer, validity, days left, % of lifetime used, renewal cadence and a renewal-stall heuristic from Certificate Transparency logs (NOT the live served cert), plus a live HTTPS pass/fail probe from Cloudflare's edge.

Is this vendor or domain safe? One call runs cert, DNS, email security, ransomware leak-site listing and vendor status checks and returns a verdict (safe, caution, risk, incomplete). $0.04 USDC on Base. Not charged if every check fails or input is invalid.

Open an SSL/TLS connection to a host and report its certificate — issuer, subject, validity window, days remaining, SANs, fingerprint and trust status.

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st