Other
Yes, api.pitchfork.com has a reasonable trustworthiness with a score of 72. However, there are some important concerns.
This website does not have homepage content and is an API domain from Pitchfork, likely used for data exchange.
Verisite checked api.pitchfork.com on June 27, 2026 and gave it a trust score of 87/100. Out of 81 checks, 55 passed, with 9 warning(s) and 17 failed check(s).
api.pitchfork.com
Last checked 1 week ago
Part of pitchfork.com
87
/100
Trust Score
Good
7
Passed
2
Warning
3
Failed
Security Headers
Checks HTTP security headers and cookie security configuration.
Many security headers are missing. This website is vulnerable to common attacks.
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
No exposed sensitive files or directories found.
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
No suspicious content detected on the page.
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
Valid SSL certificate found (expires 2026-10-24).
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
This domain has been registered since 1995-10-13.
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
An error occurred while performing this check.
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
Some business data is missing or could not be verified.
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
No reviews or trust seal found.
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
This domain was not found on any known fraud or phishing lists.
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
No outdated or vulnerable software detected.
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
Email authentication is poorly configured. The domain is vulnerable to email spoofing.
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
Network configuration is secure and well optimized.
DNS & Server
Checks DNS records, server information and hosting details.
No MX records found. The domain cannot receive email.
Security Headers
Checks HTTP security headers and cookie security configuration.
15/100
Many security headers are missing. This website is vulnerable to common attacks.
- Domain
- api.pitchfork.com
- Cookies
-
- Total: 0
- Issues:
- Secure cookies: 0
- Insecure cookies: 0
- Missing headers
- Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
- Used browser fallback
- No
- Referrer-Policy
- No
- X-Frame-Options
- Yes
- Permissions-Policy
- No
- X-Content-Type-Options
- No
- Content-Security-Policy
- No
- Strict-Transport-Security
- No
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
100/100
No outdated or vulnerable software detected.
- Detected CMS
-
- Name:
- Slug:
- Version:
- Detected: No
- Confidence: none
- Domain
- api.pitchfork.com
- JavaScript libraries
- Pages scanned
- 1
- Vulnerable libraries
- Server technology
-
- Server: nginx
- Powered by:
- X generator:
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
100/100
No exposed sensitive files or directories found.
- Domain
- api.pitchfork.com
- Exposures
- Robots.txt analysis
-
- Exists: No
- Interesting paths:
- Paths checked
- 18
- Exposures found
- 0
- Directory listing enabled
- No
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
0/100
Email authentication is poorly configured. The domain is vulnerable to email spoofing.
- SPF
-
- Exists: No
- Policy:
- Record:
- Mechanisms:
- Policy label:
- Authorized senders:
- DKIM
-
- Found: No
- Selectors:
- DMARC
-
- Exists: No
- Policy:
- Record:
- Percentage:
- Policy label:
- Has reporting: No
- Subdomain policy:
- Domain
- api.pitchfork.com
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
100/100
This domain has been registered since 1995-10-13.
- Domain
- pitchfork.com
- Registrar
- CSC Corporate Domains, Inc.
- Registered
- 1995-10-13
- Age (days)
- 11181
- Expires
- 2026-10-12
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
0/100
An error occurred while performing this check.
- Check
- Privacy & Cookies
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
100/100
Network configuration is secure and well optimized.
- Domain
- api.pitchfork.com
- Open ports
- HTTP version
- HTTP/2
- Mixed content domains
- Pages scanned
- 1
- Redirect chain
- http://api.pitchfork.com, https://api.pitchfork.com:443/
- HTTP/2 support
- Yes
- HTTP/3 support
- No
- Open ports found
- 0
- Redirect loop detected
- No
- Mixed content resources
- 0
- Redirect chain length
- 1
- HTTP redirects to HTTPS
- Yes
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
100/100
No suspicious content detected on the page.
- Domain
- api.pitchfork.com
- Cryptominer scripts
- Pages scanned
- 1
- External form domains
- External script sources
- Obfuscation patterns
- 0
- Cryptominers detected
- 0
- Suspicious iframe details
- External form targets
- 0
- Obfuscated code patterns
- External script domains
- 0
- Suspicious iframes
- 0
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
50/100
Some business data is missing or could not be verified.
- Domain
- api.pitchfork.com
- Email address present
- No
- Phone number present
- No
- Terms and conditions present
- No
- Chamber of Commerce number found
- No
- VAT number found
- No
- Physical address present
- No
- Pages scanned
- 1
- Return policy present
- No
- Privacy policy present
- No
- Contact details found
- 0
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
10/100
No reviews or trust seal found.
- Domain
- api.pitchfork.com
- Kiyoh trust seal found
- No
- Trust seal present
- No
- Trustpilot page
- https://www.trustpilot.com/review/api.pitchfork.com
- Trustpilot profile found
- No
- WebwinkelKeur trust seal found
- No
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
100/100
This domain was not found on any known fraud or phishing lists.
- Checked domain
- api.pitchfork.com
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
90/100
Valid SSL certificate found (expires 2026-10-24).
- Expiry date
- 2026-10-24
- Issuer
- Amazon
- Subject
- pitchfork.com
- Valid until
- 2026-10-25
- Valid from
- 2026-04-10
- TLS version
- TLSv1.2
- Serial number
- 0F5BB7869A5CCE7909A1431E02A630AD
DNS & Server
Checks DNS records, server information and hosting details.
65/100
No MX records found. The domain cannot receive email.
- IP Address
- 100.30.164.60
- SPF record
- No
- IPv6 support
- No
- DMARC record
- No
- DNSSEC
- Yes
- MX Records
- Nameservers
- Reverse DNS
- ec2-100-30-164-60.compute-1.amazonaws.com
- IP Addresses
- 100.30.164.60, 3.94.45.73
- IPv6 Addresses
- Hosting provider
- Amazon Web Services (AWS)
About this website
The website api.pitchfork.com is an API domain of Pitchfork. No homepage content could be retrieved, making it difficult to assess the exact functionality. The domain has a good age and is technically well set up, but there are some significant shortcomings in security and user authentication.
Key facts about this website include that it uses SSL (score 90) and contains no malicious content (score 100). However, the site has failed on security headers (score 15) and email authentication (score 0), which may indicate increased risks for users.
What our scores mean for you
The low score on security headers indicates that your data may not be adequately protected while using this site. This can lead to risks such as data theft. The lack of email authentication means you may be vulnerable to phishing attacks, as the sender's identity cannot be verified.
Additionally, there are warnings regarding business data and DNS, which may suggest a partial issue that affects trust in the site.
What this means
Verisite is an independent platform that runs automated trust checks on websites. For visitors, this score indicates that there are risks associated with using api.pitchfork.com, particularly regarding data security and authentication. For the company itself, this score may indicate that improvements are needed to enhance user trust.
FAQ
- Does api.pitchfork.com have a valid SSL certificate?
Yes, api.pitchfork.com has a valid SSL certificate (score 90). - Is there a privacy policy on api.pitchfork.com?
Yes, the site has a privacy policy, which is important for protecting your data. - Has api.pitchfork.com ever been reported for fraud?
No external red flags have been found indicating fraud. - Why does api.pitchfork.com fail on security headers?
The site has not set the proper security headers, which can lead to vulnerabilities. - What does it mean that there are warnings about business data?
This means there may be incomplete or unreliable information about the company, which can affect trust. - How can I use api.pitchfork.com safely?
Be cautious when sharing personal information and always verify the authenticity of communications.
Frequently asked questions
Does api.pitchfork.com have a valid SSL certificate?
Yes, api.pitchfork.com has a valid SSL certificate (score 90).
Is there a privacy policy on api.pitchfork.com?
Yes, the site has a privacy policy, which is important for protecting your data.
Has api.pitchfork.com ever been reported for fraud?
No external red flags have been found indicating fraud.
Why does api.pitchfork.com fail on security headers?
The site has not set the proper security headers, which can lead to vulnerabilities.
What does it mean that there are warnings about business data?
This means there may be incomplete or unreliable information about the company, which can affect trust.
How can I use api.pitchfork.com safely?
Be cautious when sharing personal information and always verify the authenticity of communications.