Website Tech Stack Detector – CMS, Analytics & Hosting Lookup

Find out what any website is built with, for one site or thousands. Paste domains and get one row per website:

• CMS / website builder: WordPress (with version), TYPO3, Contao, Drupal, Joomla, Shopware, Wix, Jimdo, Webflow, Squarespace, HubSpot CMS, Contentful …
• Shop system: Shopify, WooCommerce, Shopware, Magento, JTL-Shop, Gambio, Plentymarkets, PrestaShop, OXID …
• JavaScript frameworks: React, Next.js, Vue, Nuxt, Angular, Svelte, Astro, plus jQuery and other libraries, with versions where visible
• Analytics, tag managers & ad pixels: GA4, Matomo, etracker, Hotjar, Clarity, GTM, Meta Pixel, LinkedIn, TikTok, Google Ads …
• Cookie consent tool (CMP): Cookiebot, Usercentrics, OneTrust, Borlabs, Complianz, CCM19, consentmanager …
• CDN, hosting & web server: Cloudflare, Fastly, Akamai, CloudFront, Vercel, Netlify, WP Engine, Nginx, Apache, LiteSpeed …
• Email provider from MX records: Google Workspace, Microsoft 365, IONOS, STRATO, Proofpoint, Mimecast …
• Live chat, CRM & marketing automation, payments, reviews, booking tools, captchas, video, maps

Each technology comes with its category, version (if exposed) and evidence, i.e. the header, cookie, script URL or HTML snippet that matched. You can check every result yourself. The fingerprint set is our own (324 technologies, list below) and is tuned for European, and especially German, websites.

It needs no browser and no API key, so a run is fast and cheap: about 1–3 seconds per website, many in parallel.

What you can use it for

• Lead generation: filter a domain list down to the shops on Shopify, WooCommerce or Shopware, or the sites still running Universal Analytics, then pitch your agency or app (filterTechnologies)
• Sales qualification and CRM enrichment: add CMS, shop system, email provider and marketing stack to your leads
• Competitor research: see which analytics, A/B testing, chat and payment tools competitors use
• Agency audits and GDPR checks: which client sites use Google Fonts from Google's servers, which use no consent tool, and which use outdated jQuery
• Market research: count the technology mix across thousands of sites; the run SUMMARY holds a ready-made technology ranking

Input

Field	Description
urls	Domains or URLs (example.com, https://shop.example.de/)
filterTechnologies	Optional: only return sites using one of these, e.g. ["Shopify", "WooCommerce"]. Filtered-out sites are not charged.
detectEmailProvider	MX lookup via DNS-over-HTTPS (default true)
includeEvidence	Add the matching evidence to every technology (default true)
maxItems, maxConcurrency, timeoutSecs	Limits

{"urls": ["wordpress.org", "shopify.com", "shopware.com"], "filterTechnologies": []}

Output (real example, shortened)

{
  "url": "https://shopware.com/",
  "domain": "shopware.com",
  "finalUrl": "https://www.shopware.com/en/",
  "statusCode": 200,
  "title": "The ecommerce platform to power your online business | Shopware",
  "language": "en",
  "cms": "Contentful",
  "ecommerce": null,
  "jsFrameworks": ["Nuxt", "Vue.js"],
  "analytics": [],
  "tagManagers": ["Google Tag Manager"],
  "consentManagers": ["Usercentrics"],
  "cdn": ["Fastly"],
  "webServers": ["Nginx"],
  "emailProvider": "Microsoft 365",
  "mxRecords": ["shopware-com.mail.protection.outlook.com"],
  "technologyCount": 14,
  "technologyNames": ["Fastly", "Contentful", "Varnish", "Usercentrics", "Nuxt", "Vue.js", "PWA (Web App Manifest)", "Open Graph", "Schema.org JSON-LD", "Friendly Captcha", "Content Security Policy", "HSTS", "Google Tag Manager", "Nginx"],
  "categories": {"CDN": ["Fastly"], "CMS": ["Contentful"], "Consent management": ["Usercentrics"], "JavaScript framework": ["Nuxt", "Vue.js"], "…": []},
  "technologies": [
    {"name": "Fastly", "category": "CDN", "version": null, "evidence": "header x-served-by: cache-cmh1290047-CMH"},
    {"name": "Usercentrics", "category": "Consent management", "version": null, "evidence": "html …href=\"https://app.usercentrics.eu\"…"}
  ],
  "warning": null,
  "error": null,
  "responseTimeMs": 1770
}

Unreachable sites get an error such as Domain does not resolve (no A/AAAA record) or a timeout. If HTTPS fails but HTTP works, httpsError records why. warning flags error pages (HTTP 4xx/5xx) and near-empty pages. The key-value store record SUMMARY counts how often each technology was found across the run.

How detection works and its limits

It reads the page you enter (the homepage for a bare domain) the way a crawler does, without running JavaScript, and matches HTTP headers, cookie names, meta tags, script and stylesheet URLs and HTML markers against the fingerprint list.

• Tools that are injected only by JavaScript at runtime, for example through Google Tag Manager or only after cookie consent, may not show up. The tag manager itself is detected.
• Bot protection (Cloudflare challenge, Akamai) can return a challenge page. You then get the CDN and a warning, not the full stack.
• Versions are only reported where a site exposes them (generator meta tag, server header, file names).
• Hosting providers that leave no trace in headers can't be identified from HTTP alone.

Supported technologies (324)

Pricing

Free to use. You only pay for the Apify platform usage of your run, which is very low because no browser is used.

---

Deutsch: Kurzbeschreibung

Website Tech Stack Detector: Für beliebig viele Websites erkennen, womit sie gebaut sind:

• CMS (WordPress, TYPO3, Contao, Jimdo …) und Shopsystem (Shopify, Shopware, WooCommerce, JTL, Gambio …)
• Frameworks, Analytics und Werbe-Pixel
• Cookie-Consent-Tool (Cookiebot, Usercentrics, Borlabs …)
• CDN, Hosting, Webserver und E-Mail-Anbieter (MX)

Mit Version und Nachweis (Header, Cookie, Script). Ideal für Leadgenerierung, z. B. alle Shopware- oder WooCommerce-Shops einer Liste finden, sowie für Wettbewerbsanalyse und DSGVO-Checks. Kein Browser, kein API-Key.