It means that the domain uses one or more identifiable web technologies, such as CMS platforms (WordPress, Drupal), JavaScript frameworks (React, Angular, Vue), analytics tools, CDNs, or web servers. These technologies indicate that the site is structured, maintained, and uses standard components for functionality and performance.
The questions every analyst asks before acting on this signal.
It means that the domain uses one or more identifiable web technologies, such as CMS platforms (WordPress, Drupal), JavaScript frameworks (React, Angular, Vue), analytics tools, CDNs, or web servers. These technologies indicate that the site is structured, maintained, and uses standard components for functionality and performance.
A diverse and well-configured technology stack often signals a legitimate and mature web application. Safe domains tend to use several modern technologies to improve reliability, scalability, and user experience.
Not always, but it can be suspicious. Phishing or malicious domains often use minimal or generic setups to reduce cost and traceability. However, small or static websites may also have limited technology use, so this indicator should be analyzed alongside other signals.
A realistic shape of the entry the engine appends to the risk_signals array when this signal fires. Evidence keys are subgroup-default; per-signal overrides documented in the API reference.
{
"slug": "used_technologies",
"name": "Web Technology Stack Detected",
"group": "http_crawling_history",
"subgroup": "tech_tracker_signals",
"direction": "safe",
"evidence": {
"detected_stack": [
"nginx",
"wordpress",
"cloudflare"
],
"payment_tech": [],
"security_tech": [
"recaptcha"
],
"ecommerce_tech": []
}
}5 other signals share the same subgroup. They detect related behaviors and often co-fire on the same IOC.
It indicates that the domain employs one or more modern security layers such as Web Application Firewalls (WAF), DDoS mi…
It indicates that the domain is using one or more commercial (paid or licensed) technologies or services, such as premiu…
It means that the domain uses or integrates with an e-commerce platform such as Shopify, WooCommerce, Magento, PrestaSho…
It means that the domain integrates one or more payment systems such as Stripe, PayPal, iyzico, Adyen, or Shopify. The p…
The Verdict Gallery is a curated stream of real verdicts. Filter by this signal to see exactly which IOCs it caught, what other signals fired alongside it, and what the engine recommended.
cryvanta-flex-13[.]comHigh80Verified 2026-08-01avn-apacportalsg[.]liveHigh75Verified 2026-08-01avnoa-asiahub1[.]asiaHigh78Verified 2026-08-01avn-globe1[.]asiaHigh81Verified 2026-08-01avnsghub[.]asiaHigh79Verified 2026-08-01crytwaultattx[.]comHigh80Verified 2026-08-010719z6[.]comSuspicious69Verified 2026-08-01avn-sgportal9[.]liveHigh75Verified 2026-08-01avnportalsg[.]asiaHigh78Verified 2026-08-01avnhubsg[.]asiaHigh77Verified 2026-08-01avnhub[.]asiaHigh78Verified 2026-08-01avnsgportal[.]asiaHigh78Verified 2026-08-01avnportal[.]asiaHigh79Verified 2026-08-01avnglobalportal[.]liveHigh75Verified 2026-08-01cffcw[.]comSuspicious63Verified 2026-08-01acm-usa[.]comSuspicious72Verified 2026-08-01070620[.]xyzSuspicious64Verified 2026-08-01dp005[.]comSuspicious60Verified 2026-08-0107199[.]ukSuspicious62Verified 2026-08-01eco-sales[.]ruSuspicious65Verified 2026-08-011,000 verdicts/month on the free tier, LLM layer included. No card required.