Website Tech Stack Detector + Email & Brand Data

Give it a list of company domains and get, for each one: the technologies its website runs on, who handles its email, how its email security is set up, how old the domain is, and its brand basics (name, logo, colours and official social profiles). One clean row per domain.

What you get

Group	Fields
Technologies	name, category, version when visible, confidence. Over 300 technologies across e-commerce, CMS, analytics, tag managers, marketing and email tools, chat, consent, A/B testing, payments, frameworks, hosting and CDN
Email	email provider (Google Workspace, Microsoft 365 and others), SPF present and its includes, DMARC policy (none, quarantine or reject), BIMI, MTA-STS and TLS reporting
Domain	DNS provider, registration and expiry dates with days left, registrar, transfer locks and holds, nameservers, DNSSEC
Certificate	issuer, valid from and to, days left, names covered, TLS version
Security	HTTPS enforcement, content security policy, framing protection, and an A to F grade
Brand	name, page title and description, logo, icon, theme colour, the company's own social profiles (X, LinkedIn, Facebook, Instagram, YouTube, GitHub, TikTok)
Changes	technologies added or removed since your last run; a new registrar, nameservers, email provider or certificate issuer
Alerts	domain expiring within 30 days; certificate close to expiry (30 days, or 7 days for short auto-renewing certificates)

No people's names, emails or phone numbers. Contact details in domain records and email security reports are left out.

Use it for

• Lead lists: find stores on Shopify that use a given email marketing tool, or companies on a given CRM.
• CRM enrichment: add tech, email provider and brand assets to company records.
• Sales and agency research: know a prospect's stack before the first call.
• Change alerts: see when a prospect adds or drops a tool.
• Expiry and security monitoring: schedule a weekly run with Only changes on to get just the domains whose registration expires within 30 days or whose certificate is close to expiry, or whose registrar, nameservers or email provider changed.

How to use it

Add domains or URLs, one per line (shopify.com, https://www.notion.com). Turn on Only changes for scheduled runs. Leave the input empty to see one example.

Output example

Real output (shortened):

{
  "domain": "notion.com",
  "finalUrl": "https://www.notion.com/",
  "htmlAvailable": true,
  "technologies": [
    { "name": "Cloudflare", "category": "CDN", "version": null, "confidence": "high" },
    { "name": "Contentful", "category": "CMS", "version": null, "confidence": "high" },
    { "name": "Next.js", "category": "JavaScript framework", "version": null, "confidence": "high" },
    { "name": "Vercel", "category": "Hosting", "version": null, "confidence": "high" }
  ],
  "emailProvider": "GoDaddy Email",
  "spf": { "present": true, "includes": ["mktomail.com"] },
  "dmarc": { "present": true, "policy": "reject" },
  "dnsProvider": "Cloudflare",
  "domainCreated": "1997-10-06T04:00:00.000Z",
  "registrar": "Amazon Registrar, Inc.",
  "brand": {
    "name": "Notion",
    "logoUrl": "https://www.notion.com/front-static/logo-ios.png",
    "socialProfiles": { "x": "https://x.com/NotionHQ", "linkedin": "https://www.linkedin.com/company/notionhq" }
  }
}

Pricing

You pay for results, not failures.

What	Price
Domain fully enriched	$0.0015 each ($1.50 per 1,000)
Domain without a readable website (email, DNS and domain data only)	$0.0005 each
Technology change found (repeat runs)	$0.002 per domain with changes
Run start	$0.00005 per run (5 cents per 1,000 runs)

A domain with nothing readable at all is free. Domain details are included at no extra cost.

Free Apify plan: up to 50 domains per run.

Good to know

• Registration data comes from each domain ending's public registry. Some registries do not allow automated lookups or re-use of their data (for example .uk, .de, .eu and .co); for those the row says 'not available for this domain ending' and everything else is still returned. No owner names, emails, phone numbers or addresses are ever returned.
• What it reads: the public homepage and its response headers, public DNS records and the public domain registry. No browser, no logins.
• Sites that block automated visitors still get email, DNS and domain data, and are marked as such; the website itself is never worked around. robots.txt is respected.
• Detection is based on what the homepage loads. Tools used only on inner pages or behind a login will not show.
• Speed: about 30 domains a minute.

Support

Open an issue on this page. We reply within two business days.