573 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Does https://<domain>/.well-known/assetlinks.json exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/assetlinks.json tells you a...
Does https://<domain>/.well-known/change-password exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/change-password tells you a...
Does https://<domain>/.well-known/dnt-policy.txt exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/dnt-policy.txt tells you abo...
Does https://<domain>/.well-known/gpc.json exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/gpc.json tells you about the site'...
Does https://<domain>/.well-known/mta-sts.txt exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/mta-sts.txt tells you about the...
Does https://<domain>/.well-known/acme-challenge/ exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/acme-challenge/ tells you a...
Does https://<domain>/.well-known/carddav exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/carddav tells you about the site's...
Does https://<domain>/.well-known/caldav exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/caldav tells you about the site's to...
Does https://<domain>/.well-known/openpgpkey/policy exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/openpgpkey/policy tells y...
Does https://<domain>/.well-known/brave-rewards-verification.txt exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/brave-reward...
Does https://<domain>/.well-known/traffic-advice exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/traffic-advice tells you abo...
Does https://<domain>/.well-known/trust.txt exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/trust.txt tells you about the sit...
Does https://<domain>/.well-known/tdmrep.json exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/tdmrep.json tells you about the...
Does https://<domain>/.well-known/x402 exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/x402 tells you about the site's toolin...
Does https://<domain>/openapi.json exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of openapi.json tells you about the site's tooling and po...
Does https://<domain>/openapi.yaml exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of openapi.yaml tells you about the site's tooling and po...
Does https://<domain>/swagger.json exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of swagger.json tells you about the site's tooling and po...
Does https://<domain>/api-docs exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of api-docs tells you about the site's tooling and policies....
Does https://<domain>/graphql exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of graphql tells you about the site's tooling and policies. $0...
Does https://<domain>/.env exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed .env is a security finding. $0.01 per check.
Does https://<domain>/.git/HEAD exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed .git/HEAD is a security finding. $0.01 per check.
Does https://<domain>/wp-login.php exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed wp-login.php is a security finding. $0.01 per check.
Does https://<domain>/wp-json/ exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of wp-json/ tells you about the site's tooling and policies....
Does https://<domain>/xmlrpc.php exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed xmlrpc.php is a security finding. $0.01 per check.