Tech Enricher — Website Stack & Email/DNS Detector

Give it a list of domains. Get back the CMS, ecommerce, analytics, marketing, support, hosting/CDN, and frontend framework technologies each one runs — plus its email provider and DNS host, from public DNS records.

A pay-as-you-go alternative to Wappalyzer and BuiltWith. No subscription, no seat fees.

What you get per domain

Field	Example
technologies	React, Next.js, Cloudflare, Google Analytics
technologiesByCategory	{"Frontend": ["React"], "Hosting": ["Cloudflare"]}
emailProvider	Google Workspace, Microsoft 365, Zoho Mail, or a mail security gateway in front of the mailbox (Mimecast, Proofpoint, Cisco Secure Email, Broadcom/Symantec MessageLabs, Barracuda), from MX records, lowest preference number first (the server mail is actually delivered to; higher-numbered records are backups). null when no MX host is a recognised provider (e.g. self-hosted mail)
dnsProvider	Cloudflare DNS, AWS Route 53, GoDaddy DNS, MarkMonitor, Akamai Edge DNS, Wix DNS, … (from NS records). null when the nameservers aren't a recognised provider
spfSenders	third-party services allowed to send mail as this domain, from SPF
server, finalUrl, httpStatus	raw signal for debugging

How it works

100% public data, no logins:

• Fetches the domain's homepage (https, falling back to http) and matches its HTML, script tags, response headers, and Content-Security-Policy (which reveals tags loaded dynamically via a tag manager, not just static <script> tags) against fingerprints for 84 technologies: Analytics 15, CMS 11, Frontend 10, Hosting/CDN 9, Marketing 9, Support 7, CRM 5 (Salesforce, HubSpot CRM, Pipedrive, Zoho SalesIQ, Freshsales), Ecommerce 4, Recruiting/ATS 4, Payments 3, Video 3, Fonts 2, A/B testing 2. CRM fingerprints only count a script the page actually loads (a <script src> or the CSP), not a link or a mention in the text, so a link to a Salesforce login page or a domain like workforce.com doesn't read as "uses Salesforce".
• Looks up MX, NS, and TXT (SPF) records over DNS-over-HTTPS to identify the email provider, DNS host, and third-party mail senders.
• Respects robots.txt: skips domains that disallow root-path fetches.

Use cases

• Sales & RevOps: find accounts running the stack you integrate with or replace (e.g. "on WooCommerce, not Shopify").
• Recruiting agencies / hiring-signals pairing: cross-reference detected ATS (Greenhouse/Lever/Ashby/Workable) with Hiring Signals for a full pipeline.
• Competitive & market research: track which analytics/marketing tools a market segment standardizes on.
• Security/IT vendor risk: inventory external services a domain depends on (CDN, email, chat, forms) without agent installs.

Input

Domains, URLs, or email addresses. Each is reduced to its hostname: scheme, www., user@, port, path, ?query and #fragment are dropped, so https://www.stripe.com/pricing?ref=abc and jane@stripe.com both become stripe.com.

Pricing

$0.02 per profiled domain ($20 per 1,000), versus $250–450/month for Wappalyzer or BuiltWith plans. Unreachable, robots-blocked, bot-protected (HTTP 4xx/5xx), unparseable, bare-IP, and localhost / private-network inputs are free (returned as found: false). IP addresses and private names are rejected before anything is fetched. Set a max charge per run and the Actor stops cleanly when it's reached.

Duplicates are charged once. Inputs are deduplicated on the domain they reduce to, before anything is fetched: stripe.com, STRIPE.COM, www.stripe.com and stripe.com?ref=abc in one run give one charged profile. Each later duplicate still gets its own row, free, with duplicateOf set to the input that was profiled.

Limits & honesty

• Homepage-only detection: technologies used exclusively on subpages (e.g. checkout, docs) won't show up.
• Signatures favor precision over recall — some technologies won't be flagged if they don't leave a homepage-visible marker. Report found: false and inaccuracies as an issue; fingerprints get added on request.
• No firmographic data (employee count, revenue, etc.) is included — none of that is available from public, unauthenticated sources without violating a platform's terms.