I went with HackMyIP because its response includes a risk score and password breakdown, which made the output more useful. But you're right it just proxies XposedOrNot.