Tech Stack (10)
· Indie stack
Infrastructure
DNSSEC
Not enabled
DNS responses unsigned. Cache-poisoning vulnerable.
SSL Certificate
Google Trust Services
Valid 28 Apr 2026 to 27 Jul 2026
Certificate as captured in this snapshot, not a live check.
Email Security
✗
SPF
Not published. Your domain can be spoofed in phishing emails.
?
DKIM
Not detected at common selectors. Your provider may use a custom one.
✗
DMARC
Not published. Receivers fall back to permissive defaults.
?
MTA-STS
Not deployed. Mail to your domain can be downgraded to plaintext en route.
?
TLS-RPT
Not configured. You won't hear about silent SMTP TLS handshake failures.
Storage (9)
Cookies (4)
| Name | Lifetime | Detected as |
| _fbp |
2mo |
Facebook Pixel |
| _ga |
1y |
Google Analytics |
| _ga_NETYNRRK90 |
1y |
Google Analytics |
| __cf_bm |
< 1h |
Cloudflare |
Local storage (2)
| Key | Size | Detected as |
| lastExternalReferrer |
5 B |
- |
| lastExternalReferrerTime |
13 B |
- |
IndexedDB (3)
| Database | Version | Detected as |
| firebase-heartbeat-database |
1 |
Firebase |
| firebase-installations-database |
1 |
Firebase |
| firebaseLocalStorageDb |
1 |
Firebase |
Readiness Breakdown How?
⚠
Custom title and meta description (partial)
missing meta description
✓
Responsive viewport meta tag
✓
Favicon present
✓
Semantic HTML (nav, main, article)
-
Open Graph tags (title, image, description)
-
Canonical URL declared
-
Twitter card meta tags
480 ms
Server response
38%
Faster than peers
928 ms
Largest contentful paint
0.00
Cumulative layout shift
610 KB
Page weight
1 KB
Image weight
4
Third-party domains
0
Console errors
0
Failed requests
Indicative grade from a single automated render, not a substitute for Lighthouse or field data, and not part of the StackScope score.
Vibe Score Breakdown How?
| Signal | Points |
| Placeholder branding |
+10 |
| AI onboarding signals |
+5 |
| AI palette signals |
+5 |
| AI iconography signals |
+5 |
| AI code-structure signals |
+10 |
This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.