Tech Stack (7)
· Indie stack
Infrastructure
DNS
GoDaddy DNS
Authoritative nameserver
DNSSEC
Not enabled
DNS responses unsigned. Cache-poisoning vulnerable.
Green hosting
Not green hosted
SSL Certificate
Let's Encrypt
Valid 30 Apr 2026 to 29 Jul 2026
Certificate as captured in this snapshot, not a live check.
Email Security
✗
SPF
Not published. Your domain can be spoofed in phishing emails.
?
DKIM
Not detected at common selectors. Your provider may use a custom one.
✗
DMARC
Not published. Receivers fall back to permissive defaults.
?
MTA-STS
Not deployed. Mail to your domain can be downgraded to plaintext en route.
?
TLS-RPT
Not configured. You won't hear about silent SMTP TLS handshake failures.
Storage (10)
Cookies (1)
| Name | Lifetime | Detected as |
| ph_phc_tgwPji8xzrHrrhkzKiNESWXrKrSm3iqH3gbHCSzDupho_posthog |
12mo |
PostHog |
Local storage (6)
| Key | Size | Detected as |
| firebase:host:todo-it-4afaa-default-rtdb.firebaseio.com |
36 B |
Firebase |
| firebase:previous_websocket_failure |
4 B |
Firebase |
| nb-device-id |
36 B |
- |
| nb-timezone |
3 B |
- |
| nb-todo-v2 |
108 B |
- |
| ph_phc_tgwPji8xzrHrrhkzKiNESWXrKrSm3iqH3gbHCSzDupho_posthog |
1.3 KB |
PostHog |
Session storage (3)
| Key | Size | Detected as |
| ph_phc_tgwPji8xzrHrrhkzKiNESWXrKrSm3iqH3gbHCSzDupho_posthog |
90 B |
PostHog |
| ph_phc_tgwPji8xzrHrrhkzKiNESWXrKrSm3iqH3gbHCSzDupho_primary_window_exists |
4 B |
PostHog |
| ph_phc_tgwPji8xzrHrrhkzKiNESWXrKrSm3iqH3gbHCSzDupho_window_id |
38 B |
PostHog |
Readiness Breakdown How?
⚠
Custom title and meta description (partial)
missing meta description
✓
Responsive viewport meta tag
-
Open Graph tags (title, image, description)
-
Canonical URL declared
-
Twitter card meta tags
-
Favicon present
-
Semantic HTML (nav, main, article)
Vibe Score Breakdown How?
| Signal | Points |
| AI writing signals |
+5 |
| AI iconography signals |
+3 |
| AI code-structure signals |
+5 |
| AI CSS signals |
+15 |
This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.