Skip to main content

Website Tech & Tracker Detector

Scan any website to uncover third-party analytics, marketing pixels, CMS platforms, CDN networks, and frontend web frameworks.

Technical Architecture: Reverse-Engineering Web Technology Fingerprinting​

Analyzing a website's technology stack without browser extension overhead requires evaluating two complementary data streams: HTTP response headers and client-side HTML/script patterns.

The Website Tech Detector routes target domain lookups through a serverless proxy endpoint (/api/fetchWebsiteInfo) to parse remote headers, DNS origins, and DOM signatures.

1. HTTP Response Header Fingerprinting​

Modern web servers, edge networks, and application platforms inject diagnostic headers that reveal infrastructure details:

// api/fetchWebsiteInfo.js (header extraction)
module.exports = async (req, res) => {
  const { url } = req.query;
  const targetUrl = new URL(url);

  const response = await fetch(targetUrl.href, {
    method: 'GET',
    headers: {
      'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) WebsiteTracker/1.0'
    },
    redirect: 'follow'
  });

  const headers = Object.fromEntries(response.headers.entries());

  // Detect edge networks and origins
  const server = headers['server'] || 'Unknown';
  const poweredBy = headers['x-powered-by'] || null;
  const isCloudflare = Boolean(headers['cf-ray']);
  const isVercel = Boolean(headers['x-vercel-id']);
  const isCloudFront = Boolean(headers['x-amz-cf-id']);
  const isFastly = Boolean(headers['fastly-debug-digest']);

  // ...
};

2. DOM & Script Regex Pattern Matching​

The tool inspects public <script> source URLs, inline JavaScript objects, and meta generator tags to detect third-party libraries and runtime environments:

function detectTechnologies(html) {
  const detected = [];

  // 1. Analytics & Telemetry
  if (/googletagmanager\.com\/gtag\/js\?id=G-/i.test(html)) detected.push('Google Analytics 4');
  if (/plausible\.io\/js\/script\.js/i.test(html)) detected.push('Plausible Analytics');
  if (/cdn\.segment\.com\/analytics\.js/i.test(html)) detected.push('Segment');
  if (/posthog/i.test(html)) detected.push('PostHog');

  // 2. Marketing & Ad Pixels
  if (/connect\.facebook\.net\/.*\/fbevents\.js/i.test(html)) detected.push('Meta (Facebook) Pixel');
  if (/analytics\.tiktok\.com/i.test(html)) detected.push('TikTok Pixel');
  if (/snap\.licdn\.com\/li\.lms-analytics/i.test(html)) detected.push('LinkedIn Insight');

  // 3. Frontend Frameworks & CMS
  if (/<div id="__next">|<script id="__NEXT_DATA__"/i.test(html)) detected.push('Next.js');
  if (/<div id="__nuxt">/i.test(html)) detected.push('Nuxt.js');
  if (/\/wp-content\/|\/wp-includes\//i.test(html)) detected.push('WordPress');
  if (/cdn\.shopify\.com/i.test(html)) detected.push('Shopify');

  return detected;
}

3. Common Technology Fingerprints Reference​

CategoryFingerprint TargetIdentified Technology
Edge CDNHeader: cf-ray, cf-cache-statusCloudflare Global Anycast Network
Edge CDNHeader: x-vercel-id, x-vercel-cacheVercel Edge Network
Edge CDNHeader: x-amz-cf-id, x-amz-cf-popAWS CloudFront
CMSDOM: /wp-content/themes/, wp-jsonWordPress CMS
E-CommerceDOM: cdn.shopify.com, window.ShopifyShopify E-Commerce
AnalyticsScript: gtm.js?id=GTM-Google Tag Manager
AnalyticsScript: googletagmanager.com/gtag/js?id=G-Google Analytics 4 (GA4)
FrameworkScript: __NEXT_DATA__, /_next/static/React / Next.js Framework

4. Client-Side Security & Proxy Data Guarantee​

  • Ephemeral Inspection: All network calls execute statelessly inside temporary serverless containers. No scanned domain information is recorded or stored.
  • SSRF Shield: Targets pointing to internal RFC 1918 addresses or localhost are rejected before socket establishment.
  • Non-Invasive: Scanners execute read-only HTTP GET requests mimicking standard modern browsers without executing intrusive scripts.

Get notified about updates to this tool

No spam. Just high-quality updates about new features and guides.

Last updated on