Meract Works | Tech Stack & Analysis

What we found

Analytics set tracking cookies before any opt-in, and we found no consent manager.
It sends one of the six security headers we check; Referrer-Policy is among those missing.
DMARC only monitors (p=none), so email spoofing this domain is still delivered.
Built with WordPress and PHP, the site is hosted on Hostinger, with a domain registered 5 days before launch.

Built with: 10 technologies

Embed this on your site

For light pages

<a href="https://firstsited.com/launch/4vdz71ko/meract-works"><img src="https://firstsited.com/badge/4vdz71ko/stack.svg" alt="Meract Works tech stack on FirstSited" height="28"></a>

For dark pages

<a href="https://firstsited.com/launch/4vdz71ko/meract-works"><img src="https://firstsited.com/badge/4vdz71ko/stack.svg?theme=dark" alt="Meract Works tech stack on FirstSited" height="28"></a>

How it fits together

Each technology runs on, or extends, the one it sits under.

PHP Programming language
- WordPress CMS
  - Rank Math WordPress plugin
  - Site Kit by Google WordPress plugin

Technology	Type
Infrastructure
Hostinger DNS	DNS
Hostinger (2)	Hosting
HTTP/3	Protocol
Email
Hostinger Email	Business email
Build & Framework
WordPress (2)	CMS
PHP	Programming language
Rank Math	WordPress plugin
Site Kit by Google	WordPress plugin
Analytics & Marketing
Google Analytics (4)	Analytics
Google Tag Manager (3)	Tag management

Each technology links to its own page: which other new sites launched with it.

Site checks

Page basicsHow we check
	Custom title and meta description missing meta description
	Open Graph tags (title, image, description) missing og:image, og:description
	Twitter card meta tags
	Canonical URL declared
	Responsive viewport meta tag
	Favicon present
	Semantic HTML (nav, main, article)

Security headersHow we check
	Referrer-Policy
	X-Frame-Options
	Permissions-Policy experimental
	X-Content-Type-Options
	Content-Security-Policy
	Strict-Transport-Security
	X-XSS-Protection deprecated, not counted

Legal pages
	Privacy policy /privacy-policy/
	Terms of service /terms/
	Consent manager not detected; analytics set tracking cookies on our visit with no opt-in step

Mentions: Cookies, Do Not Sell

Crawl files
	robots.txt
	sitemap.xml 1 URLs
	security.txt optional
	llms.txt
	ads.txt only for ad-funded sites
	humans.txt optional

AI crawlers WelcomedHow we check
	llms.txt published
	No AI bots blocked in robots.txt
	Content-Signal none declared
	Link headers none advertised

Email

Record	Status	What it does
SPF ~all	Soft-fail (~all), common and accepted	Lists the servers allowed to send email for the domain.
DMARC p=none	Monitoring only (p=none)	Tells receivers what to do with email that fails SPF or DKIM.
DKIM	Not found at common selectors	Signs outgoing email. We check common selectors only, so a provider may use another.
MTA-STS	Not deployed	Stops email to the domain being downgraded to plain text in transit.
TLS-RPT	Not configured	Sends the owner reports of failed encrypted deliveries.

Hosting and network

Network	AS-HOSTINGER - Hostinger International Limited, CY AS47583, DE
DNS	Hostinger DNS authoritative nameservers
DNSSEC	Not enabled DNS answers are unsigned
Certificate	Let's Encrypt valid 3 Nov 2026 to 1 Feb 2027, as captured
Domain age	9 days registered Nov 2026, HOSTINGER operations, UAB
Green hosting	Yes per The Green Web Foundation
Page build	6 JS files, 1 CSS file 2 third-party domains, code splitting
Brand colours

Storage: 2 items

Cookies 2
Name	Lifetime	Set by
_ga	1y	Google Analytics
_ga_5P7GF13CTJ	1y	Google Analytics

Performance

Measure	This site	Reading
Server response	382 ms	good, faster than 39% of sites
Largest contentful paint	572 ms	good
Layout shift	0.00	good
Page weight	510 KB	light
Image weight	9 KB	light
Images	2	all sized and labelled
Third-party domains	2
Console errors	0	none
Failed requests	0	none

From a single automated render of the home page. A quick guide, not a substitute for Lighthouse or field data. How we measure

Notes

Looks AI-built: no AI signals. How much the site looks AI-generated. It is a pattern match shown for interest, not a verdict.
Analytics set tracking cookies on our visit and no consent manager was detected. UK and EU GDPR require opt-in before tracking runs, and more than 20 US states require honouring opt-out requests.
Performance comes from one render on 8 November 2026 and will vary between visits.

How we know

FirstSited records what new websites are built with, usually within a day of going live. Most we find ourselves, by watching public internet infrastructure for brand-new sites; the rest come from Product Hunt, Hacker News and PeerPush. We checked this one in full: its tech stack, DNS, security headers and page basics. This page is what we saw on 8 November 2026; the live site may have changed since.

Every technology below links to its own page: which other new sites launched with it. Watch any of them and get every new site that uses it as it goes live, from £15 a month.