129 Services from api.webintel-api.workers.dev

Returns Censys scan data for an IPv4 address: open ports, services, protocols, detected software, last scan timestamps, ASN, geolocation, network owner, and reverse DNS.

Returns the official World Rugby men's 15s team rankings table including position, rating points, country code, and movement from the previous update.

Returns the FIRST EPSS probability score, percentile, and scoring date for a given CVE, estimating the likelihood of exploitation in the next 30 days.

Retrieves and parses a domain's email authentication DNS records: DMARC policy, SPF mechanisms, and DKIM public keys (auto-probing 8 common selectors or a user-specified one)

Looks up a URL in the PhishTank phishing database and returns whether it is a known phishing site, along with its phish ID, verification status, and validity if found.

Returns the latest Associated Press (AP News) article headlines, publishers, publish times, and links via Google News RSS, optionally filtered by keyword and date range.

Returns paginated post metadata (title, subtitle, URL, authors, tags, reading time, audience, publish date) for a beehiiv-hosted newsletter archive, 10 posts per page, newest first.

Returns the first page of Bing web search results (title, URL, snippet) via Bing's public RSS feed, ranked by Bing's algorithm.

Searches Crossref's public REST API for scholarly records, returning DOI, title, type, container, year, authors, and link for matching works.

Fetches and keyword-filters the latest US Department of Justice press releases from the justice.gov public RSS feed

Searches recent news articles (last ~72 hours) via GDELT's Context 2.0 API, returning titles, URLs, domains, languages, timestamps, and matching sentences for a given query.

Search Google Ads Transparency Center for advertisers by name/domain, or list ads for a specific advertiser ID or website domain, with optional country filtering.

Searches Google News RSS for the newest matching stories, returning headline, publisher, publish time, and Google News redirect link

Returns organic web search results (rank, title, URL, snippet, site name, page age, language) from Brave's independent index via a simple GET request, with optional country and freshness filters.

Searches Hacker News stories by keyword, returning ranked results with points, comment counts, authors, and links

Fetches a single Hacker News item (story, comment, job, poll, etc.) by its numeric ID, returning full metadata including title, score, comments, and URL.

Searches for recent news articles across Google, Bing, and GDELT by keyword, returning URLs, titles, snippets, publishers, and publication timestamps

Returns NHS England GP prescribing statistics for a named drug from the official NHSBSA English Prescribing Dataset, grouped by region, ICB, practice, or product presentation.

Returns ranked universities by academic subject from the ShanghaiRanking Global Ranking of Academic Subjects (GRAS), including scores and indicators, with optional filtering by country or university name.

Returns side-by-side ARWU (ShanghaiRanking) and Times Higher Education world university rankings for a given university name and/or country, with full indicator scores for both systems.

Returns AbuseIPDB crowd-sourced abuse reputation for an IPv4 address: confidence score, report count, last report date, ISP, usage type, and country over the past 90 days.

Returns the upstream (transit) and downstream BGP neighbour counts for an autonomous system, plus top upstreams ranked by power with IPv4/IPv6 peer counts and top downstreams, as observed by RIPE RIS route collectors.

Checks a domain's home page for CORS misconfigurations by testing whether the server echoes arbitrary origins or sends wildcard responses with credentials allowed

Returns subdomain names, wildcard entries, certificate issuers, latest issuance dates, and valid-certificate counts found in Certificate Transparency logs for a given domain via CertSpotter

Fetches CVE vulnerability trend data for a vendor (and optionally a product) from the NIST NVD, including counts by severity, CVSS scores, top weaknesses, and highest-scored CVEs over a configurable time window.

Resolves an IPv4 address to its origin AS number, BGP prefix, country, registry, and allocation date using Team Cymru's IP-to-ASN DNS service.

Looks up and analyzes the DKIM public key DNS record for a given domain and selector, reporting key type, revocation status, key size, strength, and syntax validity.

Retrieves CAA (Certification Authority Authorization) DNS records for a domain, showing which CAs are authorized to issue standard and wildcard certificates and the incident-report address.

Checks whether a given email address's domain (or a bare domain) appears on a community blocklist of ~9,900 known disposable and temporary email providers

Looks up a file hash (SHA-256, SHA-1, or MD5) in abuse.ch MalwareBazaar and returns full metadata about the malware sample, including hashes, malware family, file type, first/last seen, tags, and delivery method — without downloading the sample.

Returns Shodan InternetDB data for an IPv4 address: open TCP ports, hostnames, CPE software identifiers, CVE IDs, and tags

Returns PTR (reverse DNS) records for an IPv4 address and validates whether each PTR hostname resolves back to the same IP via forward-confirmed reverse DNS (FCrDNS).

Checks an IPv4 address against the Spamhaus ZEN blocklist or a domain against the Spamhaus Domain Block List (DBL), returning listed status, all matching return codes with their list meanings, and a Spamhaus lookup link.

Checks a certificate SHA-1 fingerprint against the abuse.ch SSL Blacklist to determine if it has been linked to malware botnet C2 servers

Returns Cisco Talos threat reputation data for an IPv4 address, including threat level, web reputation score, DNS match status, owner/location, email volume stats, and neighbouring /24 network reputation breakdown.

Searches abuse.ch ThreatFox for indicators of compromise (IPs, domains, URLs, hashes) returning IOC details, malware family, threat type, confidence score, first/last seen, and Malpedia link.

Checks a domain's Alt-Svc response header to determine which newer HTTP protocols (HTTP/3, draft versions) it advertises and reports the max-age of that advertisement

Checks whether a given IPv4 address belongs to a known VPN or proxy network using public threat intelligence lists

Returns RDAP-based WHOIS registration data for a domain: registrar, registration/expiry dates, nameservers, status flags, and DNSSEC info

Validates a mail domain's MTA-STS configuration by checking the _mta-sts TXT DNS record and the HTTPS policy file, reporting their presence, mode, MX patterns, and max_age.

Fetches the latest Benzinga financial news headlines filtered by stock tickers and/or keywords, returning up to 100 stories newest-first from the public Benzinga JSON feed.

Looks up the SSH banner (OpenSSH version) and whether port 22 is open for a given IPv4 address, using public internet scan data.

Fetches a single CVE record from the NIST National Vulnerability Database, including description, CVSS score/severity, CWE IDs, and reference URLs

Checks whether a given URL or hostname appears in the OpenPhish public phishing feed

Fetches public product catalog metadata from a Shopify store's products.json feed, returning titles, prices, variants, images, tags, and more without requiring an API key.

Fetches a domain's HTTP response headers and scores them against security best practices, reporting which headers are present or missing.

Resolves live DNS records (A, AAAA, MX, NS, TXT, CNAME, CAA, SOA) for a domain via AdGuard/NextDNS public resolvers, returning answers with TTLs.

Searches Wikimedia Commons for freely-licensed images and returns file metadata including title, direct image URL, size, MIME type, license, author, and description — no image bytes returned.

Retrieves archived web snapshots for a URL or domain from the Internet Archive's CDX API, returning timestamps, MIME types, status codes, and direct archive links.

Returns CWTS Leiden Ranking 2025 data for universities filtered by country/continent, research field, and time period, including scientific impact, collaboration, and open access indicators.

Fetches and keyword-filters the latest FreightWaves freight/logistics news articles from its public RSS feed, returning titles, summaries, links, authors, and categories.

Returns Medscape eMedicine clinical article metadata (title, topic category, article ID, URL) from a specialty index, with optional enrichment of the first 5 results including summary, author, last-reviewed date, and paywall flag.

Looks up a scholarly paper by DOI via Crossref's public REST API, returning title, authors, journal, publication date, cited-by count, publisher, and link.

Fetches the top 50 DeFi/dapp rankings from DappRadar, including rank, token price, market cap, UAW, TVL, and volume for a given period and optional chain filter.

Checks an IPv4 address against the ipsum threat intelligence blocklist and returns its threat level score and listing status

Checks whether a CVE is on CISA's Known Exploited Vulnerabilities (KEV) catalog, or returns catalog-level statistics and newest additions if no CVE is specified.

Searches the LinkedIn Ad Library for active and historical ads by advertiser, keyword, country, and time period

Fetches and parses a domain's robots.txt and security.txt files, returning structured data about crawl rules, named user-agents, sitemaps, security contact/policy, and certificate expiry.

Checks whether a domain or IP address is listed on abuse.ch URLhaus as a malware distribution host, returning threat metadata, Spamhaus/SURBL status, and recent malicious URLs.

Returns FIFA men's national team world rankings for a given ranking date, including position, points, and previous rank for up to 211 teams.

Returns all data breaches recorded by HaveIBeenPwned for a given domain, including breach name, date, affected account count, exposed data types, and verification status.

Checks a domain against SURBL's multi-list (multi.surbl.org) to determine if it appears in spam or phishing URI blocklists, returning a 127.0.0.x response code if listed.

Fetches and de-duplicates the latest press releases from PR Newswire, Business Wire, and Newswire.com, with optional keyword filtering, returning headlines, links, dates, and summaries tagged by wire source.

Fetches a domain's Referrer-Policy HTTP header and meta referrer tag, resolves the effective browser policy, and classifies how much URL information is leaked to third parties (strict, moderate, or leaky).

Returns the origin AS, RPKI validation status, route objects, visibility, and more/less-specific prefix data for a given IPv4 CIDR prefix using RIPE RIS routing data

Generates up to 24 lookalike (typosquatting) domain variants for a brand domain and checks which ones have active DNS name servers.

Checks whether a domain's current TLS certificate has been revoked by downloading its CRL Distribution Point and looking up the serial number

Retrieves a cached SSL Labs report for a host including TLS grade, certificate chain details, cipher strengths, vulnerability flags (Heartbleed/POODLE/BEAST), and HSTS status

Checks a subdomain for potential takeover vulnerability by resolving its CNAME, matching the target against the can-i-take-over-xyz fingerprint list, and fetching the subdomain to detect unclaimed service pages.

Search the USDA AMS Market News catalogue by keyword or retrieve the latest published rows (prices, volumes, dates) for a specific report by its slug ID.

Returns TLS protocol support and cipher-suite strength for a hostname using cached Qualys SSL Labs data, flagging deprecated protocols and weak ciphers.

Checks whether a given IPv4 address is a Tor exit node and returns relay metadata (nickname, flags, country, first/last seen) from Onionoo if it is.

Fetches the latest BBC News top story headlines and summaries from the public BBC RSS feed, with optional keyword filtering on title/summary.

Searches WeChat Official Account articles via Sogou WeChat search, returning title, summary, account name, publish time, and link for up to 10 results per page.

Checks whether an IPv4 address has been seen mass-scanning the internet recently (noise), is a known benign service (riot), and returns its GreyNoise classification, name, and last-seen date.

Searches MangaDex for manga by title, returning metadata including ID, publication year, status, content rating, genre tags, and last chapter info.

Checks Shodan's passive scan records to determine whether TCP port 3389 (RDP) has been seen open on a given IPv4 address.

Fetches and evaluates a website's Content-Security-Policy HTTP header, identifying specific weaknesses like unsafe-inline, unsafe-eval, wildcards, and missing directives

Fetches the latest Reuters headlines, article URLs, and publication times from Reuters' public news sitemap, with optional keyword filtering on headlines.

Performs an on-page SEO audit of a public web page from its HTML, checking title/description length, H1, canonical link, language, viewport, robots meta, Open Graph tags, alt-text coverage, links, and word count.

Resolves an IPv4 or IPv6 address to its BGP prefix, origin AS number, AS holder name, announcement status, and coarse country/coordinates via RIPEstat

Searches Europe PMC for life-science articles and returns metadata (PMID, title, authors, journal, year, DOI, cited-by count, link) without abstracts.

Fetches and keyword-filters the latest press release headlines and summaries from PR Newswire's public RSS feed

Checks an IPv4 mail-sending address against the Barracuda Reputation Block List (BRBL) via public DNS and returns whether the IP is listed and what response code it received.

Fetches a single public web page and returns its title, description, and main text as Markdown with link counts

Retrieves and parses a domain's BIMI DNS TXT record, checking for the v=BIMI1 tag, SVG logo URL, and VMC/CMC certificate URL

Checks whether a given IPv4 address appears on the Blocklist.de 'all' list of IPs recently reported for attacks such as brute-force logins, SSH abuse, and mail abuse (~24,000 addresses).

Fetches a website's public home page and returns all cookies it sets, along with their Secure, HttpOnly, and SameSite flag status, highlighting any missing security flags.

Fetches and keyword-filters the latest articles from The Intercept's public RSS feed, returning titles, summaries, categories, and links.

Fetches and parses a domain's crossdomain.xml and clientaccesspolicy.xml files, listing allowed origins and flagging wildcard ('*') grants.

Fetches the name, tactic summary text, and page title for a single MITRE ATT&CK technique by its ID (e.g. T1059 or T1059.001) from the official MITRE ATT&CK public page.

Returns the list of TCP ports Shodan has passively observed open on a given IPv4 address, using pre-collected scan data (not a live scan).

Fetches the latest Al Jazeera news articles from its public RSS feed, optionally filtered by a keyword query against article titles and summaries.

Fetches and keyword-filters Financial Times headlines and standfirsts from public FT RSS feeds across sections like world, markets, technology, and climate-capital.

Checks an IPv4 address against the SpamEatingMonkey DNS blocklist (bl.spameatingmonkey.net) to determine if it is listed as a mail spam source.

Returns the latest Drive.com.au (Australian automotive news) article headlines, publishers, publish times, and Google News redirect links, optionally filtered by keyword and date range.

Fetches metadata for a named CRAN R package from the crandb JSON mirror, including version, description, license, maintainer, dependencies, and publication date.

Checks whether a given IPv4 address appears on the CI Army (CINS Score) collective-intelligence bad-IP list, indicating recent hostile activity observed across a sensor network.

Searches the DataCite public REST API to retrieve DOI, title, publication year, resource type, publisher, creators, and landing page for research datasets, software, and other scholarly outputs.

Fetches recent articles from Defector's public RSS feed with optional keyword filtering on title or summary

Fetches the latest DEV Community (dev.to) articles for a given tag, returning title, author, publish time, reactions, comments, reading time, and link.

Searches Figshare's public repository for research articles, datasets, and figures by keyword, returning metadata like ID, title, DOI, publication date, item type, and public page link.

Returns median TPM expression levels for a human gene across all GTEx v8 tissues, sorted highest to lowest, with the matched GENCODE ID.

Fetches the latest health-category press releases from PR Newswire's public RSS feed, with optional keyword filtering on title or summary.

Fetches and parses the German legal notice (Impressum) from a given webpage URL, extracting contact details such as email addresses, phone numbers, and postal address lines along with the full notice text as Markdown.

Searches and retrieves the latest gCaptain maritime news articles from its public RSS feed, with optional keyword filtering on title, summary, and categories.

Fetches and optionally keyword-filters New York Times home page headlines and abstracts from the public NYT RSS feed

Fetches the latest Bleacher Report sports article headlines, publishers, publish times, and Google News redirect links via Google News RSS, with optional keyword filtering and date range.

Returns current Official World Golf Ranking data including position, player name, country, total points, average points, and last week's position for top players.

Fetches bibliographic summary metadata (title, journal, publication date, authors, DOI) for up to 20 PubMed articles by PMID using NCBI E-utilities esummary

Fetches and keyword-filters the latest articles from Semafor's public RSS feed, returning titles, summaries, categories, and links.

Queries Shodan's passive scan records to determine whether TCP port 445 (SMB) has been observed open on a given IPv4 address, returning the observation status and last-refresh timestamp.

Looks up open-access status and best free full-text link for a paper by DOI using the Unpaywall API

Fetches the latest WSJ World News headlines and short summaries from the public Dow Jones RSS feed, with optional keyword filtering on title or summary.

Fetches the latest TechCrunch articles from its public RSS feed, optionally filtered by keyword match on title or summary, returning headlines and excerpts.

Fetches a public news or blog article URL and returns its headline, author, publication times, description, and full body text as Markdown

Checks an IPv4 address against the abuse.ch Feodo Tracker botnet C2 blocklist and returns threat details including port, online status, malware family, country, AS, and first/last seen dates.

Decodes a JWT (header and payload) and reports its algorithm, key ID, claims, and time checks, flagging common security issues without verifying the signature

Returns ShanghaiRanking ARWU world university rankings (top 30) including world position, institution name, national rank, total score, and six indicator scores (Alumni, Award, HiCi, N&S, PUB, PCP).

For a mail domain, lists up to 3 MX hosts with their IPv4 addresses and passively-collected Shodan data on which SMTP ports (25, 465, 587) were seen open on each host.

Reports whether Shodan's passive scan data shows TCP port 53 (DNS) open on a given IPv4 address, indicating potential open resolver exposure.

Fetches the latest CNBC top news headlines from CNBC's public RSS feed with optional keyword filtering on title and summary

Queries two independent public DNS resolvers (AdGuard DNS and NextDNS) for a given hostname and record type, then reports whether they agree, along with each resolver's answer set and lowest TTL.

Checks whether a domain has a DS record at its parent zone and whether two public resolvers (AdGuard DNS, NextDNS) return its A record with the DNSSEC authenticated (AD) flag set.

Fetches and keyword-filters the latest posts from the official WordPress.org news RSS feed, returning matching articles by title, summary, and categories.

Reports whether Shodan's passive scan data shows UDP port 161 (SNMP) open on a given IPv4 address

Returns real-time perpetual swap market ticker data (last price, 24h change, high, low, open, volumes, last candle close time) for a single BingX symbol such as BTC-USDT.

Checks Shodan's passive scan data to determine whether port 123 (NTP) has been observed open on a given IPv4 address

Searches the public npm registry for MCP server packages that convert Markdown to PDF, returning package metadata including name, version, description, publisher, publish date, and download stats.