How to tell if a website was built with Base44

To tell if a website was built with Base44, check the address and then watch where the app sends its requests. Base44, an AI app builder acquired by Wix in 2025, is different from page builders: it generates full applications with a database, user accounts and a backend that Base44 runs. That backend is the clearest fingerprint, because the app has to talk to it to work.

Base44's hosting domains

Apps published from Base44 without a custom domain live on:

• *.base44.app: published Base44 apps
• *.base44-sandbox.com: sandboxed previews

Either address is strong evidence on its own.

Requests to Base44's backend

On a custom domain, the address won't help, but the traffic will. Open the developer tools (F12, or Option+Command+I on a Mac), choose Network, reload, and type base44 in the filter box. Requests to app.base44.com mean the app's data and sign-in run on Base44.

This is a strong signal, and hard for an owner to remove without rebuilding the app, because the app depends on that backend.

The default app title

Base44 writes <meta name="apple-mobile-web-app-title" content="Base44"> into new apps. It controls the name shown when someone adds the app to an iPhone home screen, so owners often never notice it. Search the page source (Ctrl+U) for base44 to find it, along with any other mentions.

What Base44 apps look like

Base44 apps are usually tools rather than brochures: dashboards, booking systems, trackers, internal tools and small marketplaces. They tend to open on a sign-in or sign-up screen, and use the familiar React, Tailwind CSS and shadcn/ui look. As with every builder, the look alone can't name it. See our builder fingerprint guide for how Base44 compares.

Why it matters: your data

Because Base44 apps store data, the useful question is not only "was this built with AI?" but "who is looking after what I type into it?" An app made in an afternoon by one person may not have had anyone review who can read its records. Before you sign up or enter anything sensitive:

• Check that the app names a real person or company and a way to contact them.
• Look for a privacy policy that says what is stored and for how long.
• Use a password you don't use anywhere else, ideally from a password manager.
• Don't upload documents, IDs or health details to an app you can't trace to an owner.

None of this is specific to Base44. It applies to any freshly built app, which is the point of knowing how a site was made. More on the trade-offs in what is a vibe coded website?

Worked example: a booking app on its own domain

Suppose a local club sends members to a made-up address, maple-street-bookings.example, to reserve court time. It opens on a sign-in screen with a clean card layout. The address says nothing about the builder, so check the rest.

Step 1, the source. Ctrl+U shows a short page, and one line stands out:

<meta name="apple-mobile-web-app-title" content="Base44">

That is Base44's default, left in place. Strong evidence on its own.

Step 2, the traffic. In the Network tab, type base44 into the filter and reload. Requests appear as the sign-in screen loads, for example:

GET  https://app.base44.com/api/...   200
POST https://app.base44.com/api/...   200

The app's data and sign-in run on Base44's backend. That is the strongest Base44 fingerprint, because the app can't work without it.

The verdict. Likely AI-built, builder Base44. The useful follow-up is the data question from the section above: the club is the one collecting your details, so check the app names the club and links to a privacy policy before you create an account.

An app that is not Base44

A second made-up app, ledgerly.example, also opens on a sign-in screen and also uses the React, Tailwind and shadcn/ui look. Filtering the Network tab for base44 finds nothing. Instead, the requests go to an address ending in supabase.co.

Supabase is a database and sign-in service used by Lovable and Bolt projects, and by a great many apps written by hand. So this app is not a Base44 app, and Supabase alone doesn't say whether AI built it. Look for the Lovable or Bolt fingerprints next; if there are none, the fair reading is Possibly vibe coded at most, with no builder named.

Checking for Base44 automatically

Kitsuvo watches what each page loads as well as its source, so it sees calls to app.base44.com even on custom domains. It shows the builder's name and a score in the address bar, with the evidence listed. It runs on your computer and is free.