Domain Reputation & Tech-Stack Profiler
Pricing
$100.00 / 1,000 domain audits
Go to Apify Store
Domain Reputation & Tech-Stack Profiler
Profile any domain with passive public lookups: DNS (A/AAAA/MX/NS/TXT), email-security posture (SPF/DMARC/DKIM), TLS certificate, HTTP redirects and security headers, plus server/CDN tech-stack fingerprinting. Returns a 0-100 security/reputation score per domain.
Pricing
$100.00 / 1,000 domain audits
Rating
0.0
(0)
Developer
Matthias
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
2 days ago
Last modified
Categories
Share
Passively profile any domain using free, public network lookups (no API keys, no third-party services). Returns a structured JSON profile plus an overall 0-100 security/reputation score per domain.
- DNS: A / AAAA / MX / NS / TXT records
- Email security posture: SPF, DMARC, DKIM (from DNS)
- TLS: certificate issuer, validity window, verification status
- HTTP: status, redirect chain, security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy)
- Tech stack / CDN: server header, framework hints (nginx/apache/Cloudflare/ Akamai/Vercel/Netlify/etc.)
Use cases
- KYB/KYC and vendor due-diligence enrichment (pair with a sanctions screen)
- Phishing / typosquat / brand-protection triage
- Infrastructure and technology profiling for OSINT and recon
- Security-header auditing before/after hardening
Quick start
python3 -m venv .venv && . .venv/bin/activatepip install -r requirements.txtpython -m src # local test against example.com, github.com
Input
| Field | Type | Default | Notes |
|---|---|---|---|
domains | array of strings | (required) | One domain per item; bare domain or full URL accepted |
use_charges | bool | true | Monetized PPE; set false for free/internal runs |
Output
One JSON object per domain:
{"domain": "github.com","A": ["140.82.112.3"],"MX": ["aspmx.l.google.com"],"NS": ["dns1.p08.nsone.net"],"email_security": {"has_spf": true, "has_dmarc": true, "dkim_selectors_found": ["google"]},"http_profile": {"http_status": 200, "scheme": "https", "tls": {"verified": true, "issuer": "DigiCert"}, "security_headers": {"strict-transport-security": "..."}},"tech_stack": {"cdn": "Fastly", "framework_hints": []},"score": 85}
Notes
- Passive, non-intrusive lookups only. No authentication to targets.
- Performs one HTTPS GET per domain (records security headers/tech stack).
- Respects redirect chains (capped at 5) and 10s timeouts.
- DISCLAIMER: recon/screening aid; makes no legal determinations.