How to detect Bolt.new websites
StackBlitz's AI full-stack builder in the browser
Bolt.new is an in-browser full-stack development environment by StackBlitz powered by WebContainers. It generates complete React or Next.js applications from a single prompt and typically deploys to Netlify. The combination of Bolt's runtime markers and Netlify's hosting signatures makes detection straightforward.
Technical fingerprints
- ✓
bolt.new URLs in HTML source (e.g. project links back to editor) - ✓
stackblitz.*bolt pattern in scripts or comments - ✓
same-runtime or same.new markers in HTML - ✓
Netlify deployment: x-nf-request-id response header - ✓
DNS TXT record: netlify-domain-verification=... - ✓
DNS CNAME pointing to netlify.app or *.netlify.com - ✓
netlify.app subdomain in original project URL
Visual design patterns
- →React + Tailwind default aesthetic — clean, minimal
- →shadcn/ui components (Button, Card, Badge)
- →Lucide React icons
- →Purple or indigo accent color schemes
- →Gradient background sections with blur effects
- →Card-heavy layouts with rounded-xl borders
Typical tech stack
Frequently asked questions
How is Bolt.new different from Lovable for detection purposes?+
The main difference is hosting: Bolt defaults to Netlify, Lovable defaults to Cloudflare Pages. This means different DNS TXT verification records and different response headers. The HTML visual patterns are very similar since both generate React + Tailwind + shadcn/ui.
Does Bolt leave any code comments identifying it?+
Less consistently than Lovable or v0. The most reliable Bolt signals are the hosting layer (Netlify headers and DNS) rather than HTML markers. If a Bolt site uses a custom domain on a non-Netlify host, it's harder to detect.
What's the same-runtime marker?+
Same.new (a Bolt-adjacent product) injects a same-runtime attribute or script marker. If your site has same.new or same-runtime in the HTML, it's a strong signal of StackBlitz tooling.
Detect other platforms