Screenshots, IP reputation, email deliverability, HTTP header scores, URL previews, and SSL certificate lookups. Free tier is 100 calls/day, no signup. Paid from $9/mo.
curl "https://api.sitetrace.it.com/api/shot?url=https://example.com" --output shot.png
Every endpoint returns JSON (except /api/shot, which returns a PNG). The same key works on all of them. The free tier never asks for a card.
URL → PNG. Renders with real headless Chrome. Desktop, mobile, tablet viewports. 5-min edge cache.
/api/ip7 DNSBLs + ASN + geo + risk score in one call. Catches fake-account IPs before they reach your signup form.
/api/emailSPF + DKIM + DMARC + MX + BIMI, with a 0–100 score. Catch misconfigs before Gmail marks you as spam.
/api/headersSecurity-header score for any URL. HSTS, CSP, X-Frame-Options, all the rest. Letter grade A–F.
/api/previewOpen Graph + Twitter Card + favicon + theme color from any URL. For link-in-bio, newsletter tools, chat bots.
/api/certsEvery cert ever issued for a domain, in clean JSON. Brand monitoring, subdomain recon, security audits.
Three ways in, from "just trying it" to "running in production".
No signup. Hit any endpoint with a query string. 100 calls/day per IP. You get a real response in 200ms–3s.
Email-only signup at /signup. Bumps you to 1,000 calls/day on the same endpoints.
$9/mo (1k/day), $49/mo (30k/day), $199/mo (200k/day). Cancel any time. Pay via PayPal (Paddle).
No. The free tier is fully functional with no signup — just hit any endpoint. If you want 1,000 calls/day (vs 100 per IP), email signup at /signup takes 10 seconds.
It's not a 1:1 replacement for, say, IPQS or Hunter.io — those have a wider feature set. We focus on the five (six, counting certs) most-requested utility APIs, with a generous free tier and a transparent price. We compete on the long tail of use cases where paying $300/mo for a 10x-bigger service doesn't make sense.
DNSBLs are queried live via Cloudflare DNS-over-HTTPS. Geolocation comes from ip-api.com. Email records come from the domain's authoritative DNS. Screenshots run in Cloudflare's headless Chrome. SSL data comes from crt.sh, cached for 24h.
Yes. The plan is month-to-month, no contract. Cancel from the dashboard or via the Paddle receipt email.
The API returns HTTP 429 with a JSON body explaining the situation. No surprise overage charges. Upgrade at /pricing or wait for the daily reset (UTC midnight).