Tech stack of windoors.lk
AI builder check
No AI builder evidence found
None of the 33 fingerprints we track for 9 AI app builders (Lovable, Bolt.new, v0, Replit, Base44, Manus, Anything, Emergent and YouWare) appear on this page. That is not proof the site was coded by hand: code written with AI assistants such as Cursor, Claude Code or GitHub Copilot leaves no public trace, and builder markers can be removed after an export.
This check names the builder platform from public evidence. It does not measure how much of the code was written by AI. How the check works and how accurate it is
Detected technologies (4)
99%
confidence
Header
X-Powered-By header reveals PHP version
PHP/8.3.36
Header
PHPSESSID cookie is PHP-specific
PHPSESSID
99%
confidence
Evidence (1 signal)
Link Href
Google Fonts stylesheet
https://fonts.googleapis.com
95%
confidence
Evidence (1 signal)
Header
Server header contains "nginx"
nginx
90%
confidence
Evidence (1 signal)
DNS
Cloudflare nameservers
NS: adelaide.ns.cloudflare.com
Website details
Network & TLS
IP address207.180.203.49
Reverse DNSvmi2555379.contaboserver.net
ProtocolHTTP/1.1
TLS issuerLet's Encrypt
Cert. expires
Dec 14, 2026 48 days
DNS records
Nameserversadelaide.ns.cloudflare.com
camilo.ns.cloudflare.com
Security headers 6/6
strict-transport-securityPresent
content-security-policyPresent
x-content-type-optionsPresent
x-frame-optionsPresent
referrer-policyPresent
permissions-policyPresent
Page insights
LanguageEN
HTML size80 KB (br)
Resources5 scripts · 2 stylesheets · 61 images
Third-party hosts5 fonts.googleapis.com, fonts.gstatic.com, facebook.com, instagram.com, wa.me
Open GraphPresent
Raw HTTP Headers
server
nginx
date
Tue, 27 Oct 2026 03:56:51 GMT
content-type
text/html; charset=UTF-8
transfer-encoding
chunked
connection
keep-alive
vary
Accept-Encoding
x-powered-by
PHP/8.3.36
set-cookie
PHPSESSID=3rd0mr25d9rscn2157v0remhcp; path=/
expires
Thu, 19 Nov 1981 08:52:00 GMT
cache-control
no-store, no-cache, must-revalidate
pragma
no-cache
x-xss-protection
1; mode=block
content-security-policy
upgrade-insecure-requests
cross-origin-opener-policy
same-origin-allow-popups
strict-transport-security
max-age=2592000
x-content-type-options
nosniff
x-frame-options
SAMEORIGIN
referrer-policy
strict-origin-when-cross-origin
permissions-policy
camera=(), microphone=(), geolocation=()
content-encoding
br