A Chrome Extension that analyzes any active web page and provides a detailed breakdown of its performance, SEO, frameworks, tracking tools, security headers, DNS/SSL info, WHOIS data, and social media previews.
- Title, DOM size, and page load time
- Scripts, images, CSS files, and link counts
- Framework detection: React, Angular, Vue.js, jQuery, Next.js, Nuxt.js
- Meta description
- Robots tag
- OpenGraph title (
og:title) - Twitter card
- Canonical link
- Google Analytics
- Google Tag Manager
- Content-Security-Policy (CSP)
- X-Frame-Options
- Strict-Transport-Security (HSTS)
- X-Content-Type-Options
- Referrer-Policy
- Permissions-Policy
- Redirect Chain - Detects number of HTTP redirects via browser Navigation Timing API
- DNS Lookup - Queries Google DNS-over-HTTPS for A/CNAME records and status
- SSL Certificate - Fetches certificate details from crt.sh (subject, issuer, expiry, days remaining)
- WHOIS / Domain Age - Queries RDAP for domain registration date, expiry, and nameservers
- Facebook / Open Graph - Visual card using
og:title,og:description,og:image,og:site_name - Twitter / X - Card preview respecting
twitter:cardtype (summary or summary_large_image) - LinkedIn - Preview card using OpenGraph tags
- HTML, CSS, JavaScript
- Chrome Extensions API (Manifest V3)
- Google DNS-over-HTTPS API
- crt.sh Certificate Transparency API
- RDAP (Registration Data Access Protocol)
- Clone or download this repository
- Open Chrome and go to
chrome://extensions/ - Enable Developer mode (toggle in the top-right corner)
- Click Load unpacked
- Select the
webscopefolder - The extension icon will appear in your Chrome toolbar
- Navigate to any website you want to analyze
- Click the WebScope icon in the Chrome toolbar
- Click Analyze Current Page
- Results load in two phases:
- Instant: Page info, SEO, tracking, and social preview (from the page DOM)
- Network checks: DNS, SSL, WHOIS, and security headers load in parallel in the background
- SSL info is sourced from Certificate Transparency logs via crt.sh and may reflect the most recently issued cert
- WHOIS data relies on RDAP; some TLDs (especially ccTLDs) may return limited or no data
- Security header checks use a HEAD request from the extension background worker — some servers block HEAD requests, which will show a fetch failure