Shop

Visit site

100% Pure Ayurvedic Copper

Estimated origin: Netherlands Added 9 Nov 2026 Analysed 9 Nov 2026 via

Own this site?

Screenshot of Shop

What we found

  1. It publishes DMARC but no SPF record, so receivers cannot tell which servers may send its email.
  2. It sends four of the six security headers we check; missing are Referrer-Policy and Permissions-Policy.
  3. The page is missing a custom title and description and Twitter card tags.
  4. Built with Google Merchant Center and Shopify, the site is served through Cloudflare, with a domain registered in 2022.

Built with: 19 technologies

Embed this on your site

For light pages

Built with Google Merchant Center, Shopify
<a href="https://firstsited.com/launch/7f3xa1ih/shop"><img src="https://firstsited.com/badge/7f3xa1ih/stack.svg" alt="Shop tech stack on FirstSited" height="28"></a>

For dark pages

Built with Google Merchant Center, Shopify
<a href="https://firstsited.com/launch/7f3xa1ih/shop"><img src="https://firstsited.com/badge/7f3xa1ih/stack.svg?theme=dark" alt="Shop tech stack on FirstSited" height="28"></a>

Each technology links to its own page: which other new sites launched with it.

Site checks

Page basicsHow we check
Open Graph tags (title, image, description) missing og:title, og:description
Canonical URL declared
Responsive viewport meta tag
Favicon present
Semantic HTML (nav, main, article)
Custom title and meta description
Twitter card meta tags
Security headersHow we check
Referrer-Policy
X-Frame-Options
Permissions-Policy experimental
X-Content-Type-Options
Content-Security-Policy blocks 1 of the site's own resource
Strict-Transport-Security
X-XSS-Protection deprecated, not counted
Crawl files
robots.txt
sitemap.xml 186 URLs
security.txt optional
llms.txt
ads.txt only for ad-funded sites
humans.txt optional
AI crawlers WelcomedHow we check
llms.txt published
No AI bots blocked in robots.txt
Content-Signal none declared
Link headers none advertised

Email

StateRecordStatusWhat it does
SPF Not published Lists the servers allowed to send email for the domain.
DMARC p=quarantine Quarantine Tells receivers what to do with email that fails SPF or DKIM.
DKIM Not found at common selectors Signs outgoing email. We check common selectors only, so a provider may use another.
MTA-STS Not deployed Stops email to the domain being downgraded to plain text in transit.
TLS-RPT Not configured Sends the owner reports of failed encrypted deliveries.

Without SPF, receivers cannot tell which servers may send email for this domain.

Hosting and network

Network CLOUDFLARENET - Cloudflare, Inc., US AS13335, CA
DNS GoDaddy DNS authoritative nameservers
DNSSEC Not enabled DNS answers are unsigned
Certificate Let's Encrypt valid 12 Sep 2026 to 11 Dec 2026, as captured
Domain age 4.2 years registered Sep 2022, GoDaddy.com, LLC
Green hosting Yes per The Green Web Foundation
Page build 74 JS files, 10 CSS files 13 third-party domains, code splitting
Brand colours

Storage: 22 items

Cookies 15
NameLifetimeSet by
ANONCHK< 1hBing Ads
cart_currency14d-
localization1y-
MR7d-
MUID1yBing Ads
SMsession-
SRM_B1yBing Ads
_clck1yMicrosoft Clarity
_clsk1dMicrosoft Clarity
_shopify_analytics1yShopify
_shopify_cmp1yShopify
_shopify_essential1yShopify
_shopify_marketing1yShopify
_shop_app_essential1yShopify
__cf_bm< 1hCloudflare
Local storage 3
KeySizeSet by
shopify:webmcp_adapter_loaded4 BShopify
signInWithShop:cartSyncTransferAttemptedAt13 BShopify
viewedProducts18 B-
Session storage 4
KeySizeSet by
consentHeader38 BShopify
country_data44 B-
_cltk7 BKlaviyo
_shs_state129 BShopify

Performance

MeasureThis siteReading
Server response 675 ms fair, faster than 19% of sites
Largest contentful paint 1,108 ms good
Layout shift 0.05 good
Page weight 3.1 MB heavy
Image weight 389 KB light
Images 27 11 without width and height
Third-party domains 13
Console errors 0 none
Failed requests 0 none

From a single automated render of the home page. A quick guide, not a substitute for Lighthouse or field data. How we measure

Notes

  1. Looks AI-built: few AI signals. How much the site looks AI-generated. It is a pattern match shown for interest, not a verdict.
    Which signals fired
    SignalPoints
    AI palette signals+5
    AI writing signals+5
    AI iconography signals+3
  2. Analytics set tracking cookies on our visit and no consent manager was detected. UK and EU GDPR require opt-in before tracking runs, and more than 20 US states require honouring opt-out requests.
  3. Performance comes from one render on 9 November 2026 and will vary between visits.

How we know

FirstSited records what new websites are built with, usually within a day of going live. Most we find ourselves, by watching public internet infrastructure for brand-new sites; the rest come from Product Hunt, Hacker News and PeerPush. We checked this one in full: its tech stack, DNS, security headers and page basics. This page is what we saw on 9 November 2026; the live site may have changed since.

Every technology below links to its own page: which other new sites launched with it. Watch any of them and get every new site that uses it as it goes live, from £15 a month.

Spot a mistake? If a technology shown here is wrong or out of date, email [email protected] and we'll review it.