HTTP Headers Analysis for https://blink.new

Detected Technologies from Headers

See all in URL Inspect 16

GitHub

Entri

Google AdSense

Google Analytics

Google API JS Client

Google Cloud Storage

Google Conversion Tracking

Google DoubleClick

Google Fonts

Google Search

Google Tag Manager

jsDelivr

Next.js

PostHog

Unsplash

Vercel

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

default-src; script-src; worker-src; +6 more Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

accept-ranges: bytes
connection: close
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

Caching Headers

Age

Caching

7236

Cache-Control

Caching

no-cache, no-store, must-revalidate

Etag

Caching

"a0a20a9eb7aec8298a6677583e14c7ba"

Expires

Caching

0

Pragma

Caching

no-cache

age: 7236
cache-control: no-cache, no-store, must-revalidate
etag: "a0a20a9eb7aec8298a6677583e14c7ba"
expires: 0
pragma: no-cache

Content Headers

Content-Disposition

Content

inline

Content-Length

Content

831588

Content-Type

Content

text/html; charset=utf-8

content-disposition: inline
content-length: 831588
content-type: text/html; charset=utf-8

Server Headers

Server

Vercel

server: Vercel

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Headers

Cors

X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version, Authorization, Bearer

Access-Control-Allow-Methods

Cors

GET,DELETE,PATCH,POST,PUT,OPTIONS

Access-Control-Allow-Origin

Cors

*

access-control-allow-credentials: true
access-control-allow-headers: X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version, Authorization, Bearer
access-control-allow-methods: GET,DELETE,PATCH,POST,PUT,OPTIONS
access-control-allow-origin: *

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Thu, 03 Sep 2026 00:46:35 GMT

Link

Other

URL /.well-known/api-catalog

rel=api-catalog

URL /.well-known/agent-skills/index.json

rel=describedby

URL /.well-known/mcp/server-card.json

rel=describedby

URL /.well-known/mcp.json

rel=describedby

URL /.well-known/api-catalog

rel=api-catalog

URL /.well-known/agent-skills/index.json

rel=describedby

URL /.well-known/mcp/server-card.json

rel=describedby

URL /.well-known/mcp.json

rel=describedby

URL /.well-known/ai-plugin.json

rel=describedby

URL /.well-known/skills.json

rel=describedby

URL /.well-known/oauth-protected-resource

rel=describedby

URL /.well-known/openid-configuration

rel=describedby

URL /llms.txt

rel=describedby type=text/plain

URL /docs/llms.txt

rel=service-doc type=text/plain

URL /docs/api

rel=service-doc

URL /.well-known/security.txt

rel=describedby

X-Dns-Prefetch-Control

Other

on

X-Matched-Path

Other

/

X-Nextjs-Prerender

Other

1

X-Nextjs-Stale-Time

Other

300

X-Vercel-Cache

Other

HIT

X-Vercel-Id

Other

iad1::qg6ct-1788396395157-9225778113ea

date: Thu, 03 Sep 2026 00:46:35 GMT
link: </.well-known/api-catalog>; rel="api-catalog", </.well-known/agent-skills/index.json>; rel="describedby", </.well-known/mcp/server-card.json>; rel="describedby", </.well-known/mcp.json>; rel="describedby", </.well-known/ai-plugin.json>; rel="describedby", </.well-known/skills.json>; rel="describedby", </.well-known/oauth-protected-resource>; rel="describedby", </.well-known/openid-configuration>; rel="describedby", </llms.txt>; rel="describedby"; type="text/plain", </docs/llms.txt>; rel="service-doc"; type="text/plain", </docs/api>; rel="service-doc", </.well-known/security.txt>; rel="describedby"
x-dns-prefetch-control: on
x-matched-path: /
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-vercel-cache: HIT
x-vercel-id: iad1::qg6ct-1788396395157-9225778113ea

Recommendations

Enable compression (gzip/brotli) to improve performance