Website scanner

DNS and mail security, TLS, security headers, cookies, technology, exposure, domain history and subdomains (including takeover risks), with a grade and a list of what to fix. Passive checks only: the site gets a handful of ordinary requests, nothing is port-scanned or attacked.