User-facing changes to the API, Chrome extension, and website.
X-RateLimit-Used header reflects it. This is what the plan description has always promised; until now the request was billed anyway. No action needed, and nothing was charged retroactively that shouldn’t have been — the change applies from today forward.example.com that redirected to www.example.com was stored under the redirected hostname but looked up under the one you sent, so it missed the cache every time. Those lookups were re-scanning the target on every call and paying full latency. They are now served from cache on the second request, like every other domain.upgrade_url in a 429 and the upgrade field in a 403 now point to your account’s checkout at detectzestack.com/pricing instead of the RapidAPI marketplace. RapidAPI subscribers continue to be directed to the RapidAPI listing. Three of those links also pointed at a URL that rendered a blank page; that is fixed./analyze (or any of /check, /lookup, /dns, /vulnerability, /history, /stats, /changes, /certificate/check, /security) returns a 4xx or 5xx because the target domain didn’t resolve, the TLS handshake failed, the fetch timed out, or the site was unreachable, the credit it consumed is now refunded automatically. The X-RateLimit-Used header reflects the refund. Customers whose monthly counter was charged for failed scans in early June were credited retroactively. The /site, /analyze/batch, and /compare endpoints have separate refund handling on the roadmap.curl command and an explanation of what to expect on the dashboard. First-time users know what to do with their key the moment they land./built-with/{Tech} — click any tech name in a post to see which sites use it./tech/{domain} pages with thin or unreliable detection data (fewer than 4 technologies, fewer than 2 categories, or a non-2xx scan response) now return X-Robots-Tag: noindex. Improves the signal-to-noise ratio of the indexed corpus./built-with/{Tech} URLs are now case-normalized via 301 to the canonical case — e.g. /built-with/cloudflare 301s to /built-with/Cloudflare./whatruns-api-docs and /blog/whatruns-alternative-api now 301 to the canonical /blog/whatruns-api-key-alternative./analyze?url=stripe.com against your key and renders the JSON response inline. No terminal needed for the first call./check, /lookup, /vulnerability, and /site endpoints (previously documented only in the RapidAPI portal)./signup with your email — magic-link verification, then pick a plan and pay via Stripe Checkout. No RapidAPI account required./dns) — query A, AAAA, CNAME, MX, TXT, NS records with automatic provider fingerprinting (111 CNAME signatures)./certificate/check) — inspect certificate issuer, expiry, chain, protocol version, and SANs for any domain./security) — grades websites A+ through F on CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy./changes) — track when monitored domains add, remove, or update technologies. Webhook alerts on changes./tech/{domain} pages — browse any domain's tech stack directly on detectzestack.com./analyze/batch — analyze up to 10 URLs in a single API request with optional CSV export./compare — side-by-side tech stack comparison across 2–10 sites./webhooks — HMAC-signed webhook notifications when domains are analyzed./history and /stats — view past scans and per-key usage analytics.