Free Domain Technology Stack Scanner avatar

Free Domain Technology Stack Scanner

Pricing

from $5.00 / 1,000 domains

Go to Apify Store
Free Domain Technology Stack Scanner

Free Domain Technology Stack Scanner

Detect the complete technology stack of any website. Identifies ecommerce platforms (Shopify, WooCommerce, Magento), CMS (WordPress, Contentful), JS frameworks (React, Next.js, Vue), analytics (GA4, GTM), payment providers (Stripe, PayPal, Klarna), hosting/CDN, SSL certificates.

Pricing

from $5.00 / 1,000 domains

Rating

0.0

(0)

Developer

SR

SR

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

a day ago

Last modified

Share

Website Technology Stack Detector & Scanner - Identify Any Website's Tech Stack

Instantly detect the complete technology stack of up to 20 websites per run. Identify ecommerce platforms (Shopify, WooCommerce, Magento), CMS (WordPress, Contentful), JavaScript frameworks (React, Next.js, Vue), analytics tools, payment providers, hosting, CDN, SSL certificates, DNS configuration, and 60+ other technology categories. The most comprehensive website technology profiler available on Apify.

Why Use This Actor?

Whether you're doing competitor analysis, lead generation, sales prospecting, or market research, knowing what technologies a website uses gives you a massive strategic advantage.

  • Sales teams: Find prospects using specific platforms (e.g., "all Shopify stores using Klaviyo")
  • Marketing agencies: Audit client websites before pitching services
  • Developers: Evaluate tech stacks before building integrations
  • Investors: Due diligence on a company's technical infrastructure
  • Security researchers: Assess SSL, SPF, DMARC, DKIM compliance

What Technologies Does It Detect?

This actor scans 22 technology categories across 2 detection methods (direct website analysis + DNS/TXT record intelligence):

Website Technologies (Direct Detection)

CategoryExamples
Ecommerce PlatformShopify, Shopify Plus, WooCommerce, Magento, BigCommerce, PrestaShop, Shopware, Lightspeed, Salesforce Commerce Cloud, Squarespace
CMSWordPress, Contentful, Webflow, Drupal, Joomla
JavaScript FrameworksReact, Next.js, Vue.js, Angular, Svelte, Ember.js, Nuxt.js
JavaScript LibrariesjQuery, D3.js, Owl Carousel, Lodash, Axios
AnalyticsGoogle Analytics, Google Tag Manager, Microsoft Clarity, FullStory, Contentsquare, Crazy Egg, New Relic, Rollbar, Sentry
AdvertisingMeta Pixel, Google Ads, Google DoubleClick, Criteo, TikTok Pixel, Twitter/X Pixel, Rakuten Advertising
Email MarketingMailchimp, Klaviyo, Brevo (Sendinblue), ActiveCampaign
Payment ProvidersStripe, PayPal, Mollie, Klarna, Apple Pay, Google Pay, Shop Pay, Afterpay, iDEAL, Bancontact, Amazon Pay
Reviews & TrustTrustpilot, WebwinkelKeur, Bazaarvoice, Kiyoh, Trusted Shops
Consent & PrivacyComplianz, CookieBot, OneTrust, Iubenda
Hosting & CDNCloudflare, Akamai, AWS, Google Cloud, Azure, Firebase, Fastly, Cloudinary, Nosto
SEOYoast SEO, Schema.org, JSON-LD, Open Graph, Twitter Cards, XML Sitemap
FontsGoogle Fonts, Adobe Fonts, Typekit
Tag ManagementGoogle Tag Manager, Data Layer, Tealium
MiscellaneousGoogle Maps, Google reCAPTCHA, GraphQL, Webpack, YouTube Embed, WPBakery

DNS & TXT Record Intelligence (Works Even on Blocked Sites)

CategoryExamples
AI ToolsOpenAI / ChatGPT Enterprise, ElevenLabs AI
Identity & AuthAdobe IDP, Okta, Auth0
DevOpsDocker Hub, GitHub, GitLab
CollaborationAtlassian (Jira/Confluence), Miro, Notion, Airtable, Slack
Project ManagementWrike, Monday.com, Asana
Device ManagementJamf (Apple MDM), Microsoft Intune
SSL ProvidersGlobalSign, DigiCert, Let's Encrypt

Infrastructure & Security Analysis

Data PointDetails
DNS RecordsMX records, nameservers, TXT records, IP addresses
Email SecuritySPF, DMARC, DKIM verification
SSL CertificateIssuer, validity dates, SAN domains, TLS protocol version
Email ProviderGoogle Workspace, Microsoft 365, custom mail servers
DNS ProviderCloudflare, AWS Route 53, NS1, Google Cloud DNS
Social MediaFacebook, Instagram, TikTok, Twitter/X, LinkedIn, YouTube, Pinterest
Contact EmailsExtracted email addresses from website and DNS
Robots.txtSitemaps, blocked paths, allowed paths, crawl delay
Response HeadersServer software, X-Powered-By, security headers

Input

FieldTypeRequiredDescription
domainsArray of stringsYesUp to 20 website domains to scan (e.g., shopify.com, bol.com, zalando.de). Accepts with or without https:// or www.

Input Examples

Single Domain

{
"domains": ["coolblue.nl"]
}

Multiple Domains (up to 20)

{
"domains": [
"shopify.com",
"bol.com",
"coolblue.nl",
"zalando.de",
"mediamarkt.nl"
]
}

Output

One dataset row per domain with 61 data fields covering all detected technologies and infrastructure details.

Output Example

{
"domain": "coolblue.nl",
"success": true,
"fetch_method": "direct",
"technology_count": 39,
"ecommerce": [],
"cms": [],
"javascript_frameworks": [],
"javascript_libraries": [],
"analytics": ["Crazy Egg", "Google Analytics", "Google Search Console", "Google Tag Manager", "Rollbar"],
"advertising": [],
"email_marketing": [],
"payment": ["Apple Pay", "Bancontact", "Google Pay", "PayPal"],
"reviews_trust": [],
"consent_privacy": [],
"hosting_cdn": ["Firebase", "Apple", "Microsoft 365"],
"seo": ["JSON-LD", "Open Graph", "Schema.org", "Twitter Cards", "XML Sitemap"],
"fonts": ["Google Fonts"],
"tag_management": ["Google Tag Manager"],
"miscellaneous": [],
"ai": ["ElevenLabs AI", "OpenAI / ChatGPT Enterprise"],
"identity": ["Adobe IDP"],
"devops": ["Docker Hub"],
"collaboration": ["Atlassian", "Miro"],
"project_management": [],
"device_management": ["Jamf (Apple MDM)"],
"ssl_tech": [],
"email_provider": "Google Workspace",
"dns_provider": "TransIP",
"mx_records": [{"host": "aspmx.l.google.com", "priority": 10}],
"nameservers": ["ns0.transip.net", "ns1.transip.nl", "ns2.transip.eu"],
"has_spf": true,
"has_dmarc": true,
"has_dkim": true,
"domain_verifications": ["Adobe IDP", "Apple", "Atlassian", "Docker Hub", "ElevenLabs AI", "Google Search Console", "Jamf (Apple MDM)", "Microsoft 365", "Miro", "OpenAI / ChatGPT Enterprise"],
"ip_addresses": ["104.17.100.135", "104.17.101.135"],
"ssl_issuer": "E6",
"ssl_issuer_org": "Let's Encrypt",
"ssl_valid_from": "Feb 16 2026",
"ssl_valid_until": "May 17 2026",
"ssl_protocol": "TLSv1.3",
"social_facebook": "https://www.facebook.com/coolblue",
"social_instagram": "https://www.instagram.com/coolblue_nl",
"social_twitter": "https://twitter.com/coolaborateurs",
"social_youtube": "https://www.youtube.com/coolblue",
"emails": [],
"has_robots_txt": true,
"sitemaps": ["https://www.coolblue.nl/sitemap.xml"],
"server": "cloudflare",
"processing_time_seconds": 3.21,
"cached": false
}

How It Works

The actor uses a dual-detection approach to maximize coverage:

  1. Direct Website Analysis — Scans the live website HTML, JavaScript, HTTP headers, and meta tags to identify frontend technologies, analytics scripts, payment integrations, and more.

  2. DNS & TXT Record Intelligence — Analyzes DNS records (MX, TXT, nameservers) to detect backend services, cloud providers, AI tools, collaboration platforms, and security configurations. This method works even when websites block scrapers (Cloudflare, Akamai WAF, etc.).

Both detection methods run simultaneously and results are merged into a single unified output.

Retry & Reliability

  • Automatic retry with exponential backoff (3 attempts)
  • Graceful handling of blocked/protected websites via DNS fallback
  • Fine-tuned timeouts (5s connect, 60s read)

Use Cases

Lead Generation & Sales Prospecting

Identify companies using specific technologies to build targeted prospect lists. Find all Shopify stores, WooCommerce sites, or companies using Stripe payments.

Competitive Intelligence

Analyze competitor technology stacks to understand their infrastructure, analytics tools, advertising platforms, and payment providers.

Market Research

Map technology adoption across industries. Track which ecommerce platforms, CMS, and payment providers dominate specific markets.

Security Auditing

Verify SSL certificate validity, check email authentication (SPF/DMARC/DKIM), and assess security header configurations.

Agency Pitching

Audit a potential client's website technology before pitching services. Identify missing analytics, outdated CMS, or suboptimal payment integrations.

Investment Due Diligence

Evaluate a company's technical maturity through their technology stack, cloud infrastructure, and tooling choices.

Performance

  • Response time: 1-5 seconds per domain (depending on website complexity)
  • Dual detection: Direct scraping + DNS analysis for maximum coverage
  • 61 output fields: Most comprehensive technology profiler available
  • 22 technology categories: From ecommerce to AI tools
  • Works on protected sites: DNS fallback ensures data even for WAF-blocked domains

Tested & Verified

Successfully tested on major ecommerce and technology websites:

DomainTech CountHighlights
shopify.com4110 ecommerce platforms, React, PayPal, Shop Pay
mediamarkt.nl47Klarna, iDEAL, Apple Pay, Contentsquare, Sentry
coolblue.nl39Firebase, Google Pay, OpenAI, ElevenLabs AI
walmart.com26Next.js, React, Svelte, FullStory, PayPal
zalando.de25Contentful, Webflow, Apple Pay, Akamai
asos.com26Afterpay, New Relic, Akamai, TikTok Pixel
bol.com18Cloudflare, Docker Hub, Atlassian
amazon.com14DigiCert SSL, Docker Hub, Wrike
ikea.com13Google Analytics, Rollbar, Sentry
etsy.com17Stripe, Fastly CDN, OpenAI (DNS-detected)

FAQ

What's the difference between direct detection and DNS detection?

Direct detection scans the website's HTML and JavaScript to find technologies loaded in the browser. DNS detection analyzes domain records (TXT, MX, nameservers) to find services verified at the domain level — like cloud providers, AI tools, and collaboration platforms.

Does it work on Cloudflare-protected websites?

Yes. When direct scraping is blocked, the actor automatically falls back to DNS/TXT record analysis. You'll still get technology data, DNS records, SSL info, and domain verifications.

Can I scan multiple domains?

Yes! Enter up to 20 domains per run. All domains are scanned concurrently for fast results. Each domain gets its own row in the output dataset.

What format is the output?

JSON dataset with 61 fields. Export to CSV, JSON, Excel, or access via the Apify API.

Privacy

This actor only accesses publicly available information: website HTML, DNS records, SSL certificates, and HTTP headers. No login credentials or private data are accessed.