How is this website built?
Enter any address for a plain-language report: technology stack, hosting, security headers, certificate chain, Core Web Vitals, email protection and who it shares data with.
Security & headers
Reads the homepage response for HSTS, Content-Security-Policy, clickjacking and MIME-sniffing defences, cookie flags and script integrity, showing the observed value for each. Email spoofing protection (SPF, DKIM, DMARC) is checked from DNS.
Performance & Core Web Vitals
Largest Contentful Paint, interaction latency, layout stability and time to first byte from Google PageSpeed Insights, using real Chrome user data where it exists and a throttled mobile lab run otherwise, judged against Google's thresholds.
Infrastructure & stack
Resolves DNS and the CDN edge, looks up domain registration, walks the TLS certificate chain, and fingerprints the platform, framework, analytics and third-party scripts, with WordPress and Shopify details where visible.