Website profiles · Technology insights · Alternatives

onlook.com Paid content

Categories: Development

Craft, edit, and ship web experiences with AI. Onlook is the visual code editor for designers and product managers.

Visit website

Updated: 2026-09-01 09:22 Language: English (default) Access: Normal

Profile views 9 Outbound visits 6
Onlook Full homepage screenshot

Website Overview

An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality. Page metadata, canonical configuration and social previews work together to provide more consistent search and sharing presentation.

Domain and Registration

Registered in 1996, this domain has about 30 years of history. That suggests continuity, although ownership and purpose may have changed. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The registrar is NameCheap, Inc., a widely used domain service provider. The domain uses the common .com extension, which is not an independent safety signal.

DNS and Email

Nameservers are provided by Cloudflare, indicating managed DNS hosting. MX records point to the Google Workspace email service. SPF and DMARC are configured. DKIM status is unknown. TXT records include verification markers for Google. Such markers may also remain after a service stops being used. DNSSEC signatures were not detected, so this additional DNS authenticity protection is not confirmed.

TLS and Certificates

The certificate uses an RSA 2048-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued by Let's Encrypt, commonly associated with automated certificate services. The certificate's total validity is about 89 days, consistent with a short renewal cycle.

HTTP and Browser Security

The response lacks these common security headers: CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, clickjacking protection. CORS permits any origin to read this response. This is common for public resources; sensitive responses need narrower handling. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. No obvious internal addresses or debug information were found in the headers. The Server header contains the custom value Vercel.

Technology Stack Analysis

The public page identifies Vercel without precise versions, leaving fewer clues for version-specific scanning.

Search and Social Sharing

Open Graph is partially configured; og:image is missing. Twitter Card metadata is configured. JSON-LD includes Organization data, helping describe the organization as an entity. The title has 29 characters, within a common display range. A meta description is present, with 115 characters.

Hosting and Email

DNSCloudflare
HostingVercel
EmailGoogle Workspace
Location United States flagUnited States 216.150.1.193

Pages, Search and Sharing

Meta descriptionCraft, edit, and ship web experiences with AI. Onlook is the visual code editor for designers and product managers.
Canonical URLhttps://www.onlook.com
LanguageEnglish (default)
Twitter Cardsummary_large_image
All bots 1 allowed · 2 disallowed
  • Allow/
  • Disallow/api/
  • Disallow/monitoring

Registration details RDAP / WHOIS

RegistrarNameCheap, Inc.
Registered1996-04-29
Expires2029-04-30
Domain statusclient transfer prohibited
Nameserversian.ns.cloudflare.com、sloan.ns.cloudflare.com
DNSSECunsigned

DNS records

TypeNameValueTTLPriority
A2acb7b632db27183.vercel-dns-016.com216.150.1.1300
A2acb7b632db27183.vercel-dns-016.com216.150.16.1300
MXonlook.comsmtp.google.com3001
NSonlook.comian.ns.cloudflare.com86400
NSonlook.comsloan.ns.cloudflare.com86400
TXTonlook.comgoogle-site-verification=RbKXVuLXdfOtFsXWV-4PxOJgcXakcx5PzF01ALkg8Lk296
TXTonlook.comgoogle-site-verification=p3lpgkuDT7H0VZ9gHDfok2IcLthgxMGl9WpfPccMMp4296
TXTonlook.comoneleet-domain-verification-e8611548-19da-4714-a49e-3e875a9021bb296
TXTonlook.comslack-domain-verification=wjIiEQOxr849ico2TFIakhFzXX1zVI5vTk1eARoL296
TXTonlook.comv=spf1 include:_spf.google.com ~all296
CNAMEwww.onlook.com2acb7b632db27183.vercel-dns-016.com300
DMARC_dmarc.onlook.comv=DMARC1; p=none; rua=mailto:[email protected]300

TLS and certificates

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjectwww.onlook.com
IssuerLet's Encrypt
Valid until2026-10-08T21:44 · Remaining when checked: 37 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HeaderValue
content-typetext/html; charset=utf-8
cache-controlpublic, max-age=0, must-revalidate
serverVercel
strict-transport-securitymax-age=63072000
access-control-allow-origin*

Identified technologies

Vercel

Recent Updates

Related questions

More questions →

No related questions yet.

User reviews (0)