Hosting, unpacked.

CMS detection is pattern matching on a public response, not a lookup in a registry. This guide walks through the six signal families every detector uses, the specific fingerprints for WordPress, Shopify, Wix and Webflow, and the two situations — headless architectures and stripped headers — where detection quietly stops working.

SPF, DKIM and DMARC are three DNS records that decide whether anyone can send mail pretending to be your domain. They matter even if your domain has never sent an email. This guide covers the exact record syntax, what changed when DMARC became a Standards-Track RFC in 2026, the mistakes we see most, and why no automated checker can prove your DKIM is complete.

A hosting migration leaves fingerprints in DNS, IP, ASN, headers and CDN configuration — but you almost always see them late, and sometimes not at all. This guide covers the five signals that change, how to read them manually, what our migration tracker logs, and why a CDN can hide an origin move completely.

An ASN is the strongest single clue in hosting detection — and the one most often misread. This guide explains what an Autonomous System Number is, how to look one up with dig, whois and RDAP, what our checker does with it, and the four situations where the ASN points you at the wrong company.

A site that will not load looks like one problem. It is usually four stacked on top of each other: the name has to resolve, the TLS handshake has to complete, the CDN edge has to reach the origin, and the origin has to answer. This guide gives you the diagnostic order, the exact commands, and an honest account of what an automated checker can and cannot see.

Every time you open a website, your browser and the server swap hidden notes called HTTP headers. They reveal which server software is running, how things get cached, and whether security protections are switched on. This beginner-friendly guide shows you what those headers mean and how to read them yourself. By the end you'll inspect any site like a developer, no coding required.

Security headers are the cheapest hardening you can ship — a few lines in your server config and your site shrugs off a whole class of attacks. This guide walks through HSTS, CSP, X-Frame-Options and the rest from hands-on practice, including what's deprecated and what actually moves the needle. You'll get copy-paste config for nginx, Apache and common platforms, plus how a header checker grades your responses.

AI search visibility is the new SEO, but most people never check the boring prerequisite: can the bot actually fetch the page? I'll show you the crawlers that matter, why robots.txt and Cloudflare are two separate gates that don't talk to each other, and how a single edge toggle can lock out the very bots you're trying to court. Then I hand you the exact grep and curl I use to stop guessing.

Finding out who hosts a website sounds trivial until a CDN sits in front of the origin. This guide walks through what a hosting provider actually is, the manual lookups you can run yourself, and where automated detection — including ours — quietly guesses. The goal is an honest mental model, not a magic answer.

A practical guide to detecting which CDN sits in front of a website. We look at the DNS, HTTP header and TLS signals that reliably fingerprint Cloudflare, CloudFront, Fastly and Akamai. You will also learn why some providers are deliberately hard to identify, and how to read the output without jumping to false conclusions.

A hosting checker reads what a domain shows to the public internet, and a CDN like Cloudflare deliberately changes that picture. This guide explains why the visible IP is often the edge, not the real host, and which signals raise or lower confidence. It also covers where the honest answer is simply origin hosting unknown, and why bypassing a site's security to find the origin is the wrong move.