Domain Reputation & Tech-Stack Profiler avatar

Domain Reputation & Tech-Stack Profiler

Pricing

$100.00 / 1,000 domain audits

Go to Apify Store
Domain Reputation & Tech-Stack Profiler

Domain Reputation & Tech-Stack Profiler

Profile any domain with passive public lookups: DNS (A/AAAA/MX/NS/TXT), email-security posture (SPF/DMARC/DKIM), TLS certificate, HTTP redirects and security headers, plus server/CDN tech-stack fingerprinting. Returns a 0-100 security/reputation score per domain.

Pricing

$100.00 / 1,000 domain audits

Rating

0.0

(0)

Developer

Matthias

Matthias

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

2 days ago

Last modified

Share

Passively profile any domain using free, public network lookups (no API keys, no third-party services). Returns a structured JSON profile plus an overall 0-100 security/reputation score per domain.

  • DNS: A / AAAA / MX / NS / TXT records
  • Email security posture: SPF, DMARC, DKIM (from DNS)
  • TLS: certificate issuer, validity window, verification status
  • HTTP: status, redirect chain, security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy)
  • Tech stack / CDN: server header, framework hints (nginx/apache/Cloudflare/ Akamai/Vercel/Netlify/etc.)

Use cases

  • KYB/KYC and vendor due-diligence enrichment (pair with a sanctions screen)
  • Phishing / typosquat / brand-protection triage
  • Infrastructure and technology profiling for OSINT and recon
  • Security-header auditing before/after hardening

Quick start

python3 -m venv .venv && . .venv/bin/activate
pip install -r requirements.txt
python -m src # local test against example.com, github.com

Input

FieldTypeDefaultNotes
domainsarray of strings(required)One domain per item; bare domain or full URL accepted
use_chargesbooltrueMonetized PPE; set false for free/internal runs

Output

One JSON object per domain:

{
"domain": "github.com",
"A": ["140.82.112.3"],
"MX": ["aspmx.l.google.com"],
"NS": ["dns1.p08.nsone.net"],
"email_security": {"has_spf": true, "has_dmarc": true, "dkim_selectors_found": ["google"]},
"http_profile": {"http_status": 200, "scheme": "https", "tls": {"verified": true, "issuer": "DigiCert"}, "security_headers": {"strict-transport-security": "..."}},
"tech_stack": {"cdn": "Fastly", "framework_hints": []},
"score": 85
}

Notes

  • Passive, non-intrusive lookups only. No authentication to targets.
  • Performs one HTTPS GET per domain (records security headers/tech stack).
  • Respects redirect chains (capped at 5) and 10s timeouts.
  • DISCLAIMER: recon/screening aid; makes no legal determinations.