Built for teams to create and collaborate on internal software. Loved by engineers for full code flexibility …
onlook.com
Paid content
Categories: Development
Craft, edit, and ship web experiences with AI. Onlook is the visual code editor for designers and product managers.
Website Overview
An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality. Page metadata, canonical configuration and social previews work together to provide more consistent search and sharing presentation.
Domain and Registration
Registered in 1996, this domain has about 30 years of history. That suggests continuity, although ownership and purpose may have changed. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The registrar is NameCheap, Inc., a widely used domain service provider. The domain uses the common .com extension, which is not an independent safety signal.
DNS and Email
Nameservers are provided by Cloudflare, indicating managed DNS hosting. MX records point to the Google Workspace email service. SPF and DMARC are configured. DKIM status is unknown. TXT records include verification markers for Google. Such markers may also remain after a service stops being used. DNSSEC signatures were not detected, so this additional DNS authenticity protection is not confirmed.
TLS and Certificates
The certificate uses an RSA 2048-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued by Let's Encrypt, commonly associated with automated certificate services. The certificate's total validity is about 89 days, consistent with a short renewal cycle.
HTTP and Browser Security
The response lacks these common security headers: CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, clickjacking protection. CORS permits any origin to read this response. This is common for public resources; sensitive responses need narrower handling. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. No obvious internal addresses or debug information were found in the headers. The Server header contains the custom value Vercel.
Technology Stack Analysis
The public page identifies Vercel without precise versions, leaving fewer clues for version-specific scanning.
Search and Social Sharing
Open Graph is partially configured; og:image is missing. Twitter Card metadata is configured. JSON-LD includes Organization data, helping describe the organization as an entity. The title has 29 characters, within a common display range. A meta description is present, with 115 characters.
Hosting and Email
Pages, Search and Sharing
| Meta description | Craft, edit, and ship web experiences with AI. Onlook is the visual code editor for designers and product managers. |
|---|---|
| Canonical URL | https://www.onlook.com |
| Language | English (default) |
| Twitter Card | summary_large_image |
Social Sharing Preview
7 fieldsrobots.txt (opens in a new tab)
3 rulesAll bots 1 allowed · 2 disallowed
//api//monitoring
No matching rules.
Sitemaps
1
Registration details RDAP / WHOIS
| Registrar | NameCheap, Inc. |
|---|---|
| Registered | 1996-04-29 |
| Expires | 2029-04-30 |
| Domain status | client transfer prohibited |
| Nameservers | ian.ns.cloudflare.com、sloan.ns.cloudflare.com |
| DNSSEC | unsigned |
DNS records
| Type | Name | Value | TTL | Priority |
|---|---|---|---|---|
| A | 2acb7b632db27183.vercel-dns-016.com | 216.150.1.1 | 300 | — |
| A | 2acb7b632db27183.vercel-dns-016.com | 216.150.16.1 | 300 | — |
| MX | onlook.com | smtp.google.com | 300 | 1 |
| NS | onlook.com | ian.ns.cloudflare.com | 86400 | — |
| NS | onlook.com | sloan.ns.cloudflare.com | 86400 | — |
| TXT | onlook.com | google-site-verification=RbKXVuLXdfOtFsXWV-4PxOJgcXakcx5PzF01ALkg8Lk | 296 | — |
| TXT | onlook.com | google-site-verification=p3lpgkuDT7H0VZ9gHDfok2IcLthgxMGl9WpfPccMMp4 | 296 | — |
| TXT | onlook.com | oneleet-domain-verification-e8611548-19da-4714-a49e-3e875a9021bb | 296 | — |
| TXT | onlook.com | slack-domain-verification=wjIiEQOxr849ico2TFIakhFzXX1zVI5vTk1eARoL | 296 | — |
| TXT | onlook.com | v=spf1 include:_spf.google.com ~all | 296 | — |
| CNAME | www.onlook.com | 2acb7b632db27183.vercel-dns-016.com | 300 | — |
| DMARC | _dmarc.onlook.com | v=DMARC1; p=none; rua=mailto:[email protected] | 300 | — |
TLS and certificates
| Assessment | Normal configuration |
|---|---|
| Supported protocols | TLSv1.2、TLSv1.3 |
| Negotiated protocol | TLSv1.3 |
| Certificate subject | www.onlook.com |
| Issuer | Let's Encrypt |
| Valid until | 2026-10-08T21:44 · Remaining when checked: 37 days |
| Verification details | Certificate trust: Passed · Hostname match: Passed |
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html; charset=utf-8 |
| cache-control | public, max-age=0, must-revalidate |
| server | Vercel |
| strict-transport-security | max-age=63072000 |
| access-control-allow-origin | * |
Identified technologies
Recent Updates
- Website images
Related questions
More questions →No related questions yet.
User reviews (0)