By hand: open the site in a clean incognito window with DevTools on the Network tab, filter for google-analytics.com and googletagmanager.com, and reload before touching the banner. Anything that fires there is pre-consent. Then run dataLayer in the console and look for the consent default entry — it has to appear before the gtag library loads, not after.
That method works but only shows your own session, on your own machine, with whatever extensions and cached consent you already carry. It also misses the timing question that matters most: whether the default was set early enough, measured in milliseconds rather than by eye.
Paste a URL above and the checker does the same passes from a clean browser with no history: the default state before any interaction, the banner click, and the update that should follow it.