99%
confidence
Evidence (1 signal)
Header
X-Powered-By header reveals PHP version
PHP/8.3.35
Tech stack of مساري (masari.cc)
3Technologies
3Categories
200HTTP Status
1308msScan Time
Embed this report on your site
Show your stack and link back to this report. Paste this into your HTML:
AI builder check
No AI builder evidence found
None of the 33 fingerprints we track for 9 AI app builders (Lovable, Bolt.new, v0, Replit, Base44, Manus, Anything, Emergent and YouWare) appear on this page. That is not proof the site was coded by hand: code written with AI assistants such as Cursor, Claude Code or GitHub Copilot leaves no public trace, and builder markers can be removed after an export.
This check names the builder platform from public evidence. It does not measure how much of the code was written by AI. How the check works and how accurate it is
Detected technologies (3)
99%
confidence
Evidence (1 signal)
Html Pattern
Google Tag Manager container
googletagmanager.com/gtm.js
50%
confidence
Evidence (1 signal)
Cookie
XSRF-TOKEN cookie (common with Laravel)
XSRF-TOKEN
Website details
Network & TLS
IP address195.35.60.13
All resolved IPs195.35.60.13, 212.1.212.65, 2a02:4780:1d:6ada:38d5:d687:2f4e:13c4, 2a02:4780:1e:674d:f539:60b9:a014:6dc5
ProtocolHTTP/1.1
TLS issuerLet's Encrypt
Cert. expires
Dec 8, 2026 48 days
DNS records
Nameservershorizon.dns-parking.com
orbit.dns-parking.com
Mail serversmx1.hostinger.com
mx2.hostinger.com
Security headers 6/6
strict-transport-securityPresent
content-security-policyPresent
x-content-type-optionsPresent
x-frame-optionsPresent
referrer-policyPresent
permissions-policyPresent
Page insights
LanguageAR
HTML size265 KB (br)
Resources6 scripts · 3 stylesheets · 1 images
Third-party hosts1 www.googletagmanager.com
Open GraphPresent
Raw HTTP Headers
date
Tue, 20 Oct 2026 18:13:48 GMT
content-type
text/html; charset=utf-8
transfer-encoding
chunked
connection
keep-alive
x-powered-by
PHP/8.3.35
cache-control
no-cache, private
x-content-type-options
nosniff
x-frame-options
SAMEORIGIN
referrer-policy
strict-origin-when-cross-origin
permissions-policy
camera=(), microphone=(), geolocation=(self), payment=()
content-security-policy
upgrade-insecure-requests
strict-transport-security
max-age=31536000; includeSubDomains
set-cookie
XSRF-TOKEN=eyJpdiI6IlRITURFYndGUG9vcis5WUhhREZ2dVE9PSIsInZhbHVlIjoicUFpVndEaUNEdEdEaXZvd2ZMbjIxcDdMYzZZOE9qYm9YRkhIWDdpQ09BL29vMFJGS1V0Y1AzcVNmVHc0dXJEYmVKOTZWd1F2aS83eEduZUJiYlhLSGJLMFM1QnZlNHlhVkpiektLdDdBemNlSFhQL3NLV1QwODBtVUNlQlZnN3MiLCJtYWMiOiI1ZDk5ODgxMTJhODkyMDAwZTk3YTRhYzM1M2UwNzlmOTU5OTk3Z
content-encoding
br
platform
hostinger
panel
hpanel
vary
X-Inertia,Accept-Encoding
server
hcdn
alt-svc
h3=":443"; ma=86400
x-hcdn-request-id
bba61f79c8b4509f398f549fbcee92a0-imm-edge5
x-hcdn-cache-status
DYNAMIC
x-hcdn-upstream-rt
0.315