Sales and IT teams ask the same two questions about a list of companies: are they on Google Workspace or Microsoft 365? and is the website WordPress, Shopify or something else?
Both answers are public. The email provider is in the domain's MX records; the CMS is in the HTML, headers and cookies of the homepage. Tech Stack Detector reads both for a whole list. Disclosure: I built it; it costs $1.50 per 1,000 websites.
{ "urls": ["apify.com", "github.com", "gitlab.com", "notion.so"], "checkDns": true }
A real run (4 domains, 8 seconds):
| Domain | emailProvider | MX |
|---|---|---|
| apify.com | Google Workspace | aspmx.l.google.com |
| github.com | Microsoft 365 | github-com.mail.protection.outlook.com |
| gitlab.com | Google Workspace | aspmx.l.google.com |
| notion.so → notion.com | GoDaddy Email | smtp.secureserver.net |
Two traps we hit, so you do not have to
-
TXT verification records are not an email provider. Many domains carry
MS=ms12345orapple-domain-verification=...in TXT. That only proves someone verified the domain once.emailProvideris read from MX only; security gateways (Mimecast, Proofpoint) are named as gateways, since the real mailbox provider is hidden behind them. - Redirects change the domain. gitlab.com redirects to about.gitlab.com, which has no MX at all. DNS is read for the domain you gave and the one the page ended on.
If you only need one domain, the command line is enough: dig +short MX example.com. The Actor is for when you have a few hundred.
The rest of the stack
The same row has the CMS, ecommerce platform, analytics, tag managers, CDN and hosting, from 7,000+ open Wappalyzer fingerprints, with a version where the site shows it.
More copy-paste examples (curl, Python, Node.js, n8n): github.com/msalihk/apify-actor-examples
Top comments (0)