One I built for quick outside checks on a domain: Domain Risk Report. Give it a domain and it combines four checks into one report: Registration and expiry date from RDAP, the structured replacement for WHOIS The SSL certificate: issuer, days left, and if it isn't trusted, which kind of problem it is (self-signed, missing intermediate, or an unknown root) Subdomains that have had certificates issued, from Certificate Transparency logs The live site's tech stack, from one request to the homepage It ends with plain flags like ssl-certificate-expires-within-30-days or domain-registration-expired, so an empty list means nothing obvious is wrong. A run on apify.com today pulled 35 certificates from the logs, listed 20 subdomains and raised no flags. Handy for your own domains, or a vendor's before you sign up with them. No API key needed. https://apify.com/m_ctim/domain-website-risk-report