Back
Wed, 22 Apr 2026 08:43:22 GMT
Site Audited
vibecodinggpt.ai
Completed
Wed, 22 Apr 2026 08:43:22 GMT
Duration
213ms
Overall
99 · A+
99
A+
A score
vibecodinggpt.ai
Audit completed
Strong technical setup overall. No major failures were detected in this audit.
Main issue: No major failures were detected in this audit.
Edge/network/header analysis · bot simulation · crawlability evidence
Alert
No urgent crawler access problem was found in this audit.
Advise
Your most important bots appear to be reaching the site normally, so the main opportunities are lower-priority hardening and polish.
Action Step
Keep monitoring crawler access and focus next on response headers, caching, and small technical improvements.
Key Findingswhat failed first
Passed
HTTPS is enabled.
HSTS is valid.
robots.txt is present.
Fix Priorityrecommended next steps
1Review tracking flags and confirm only intended analytics scripts are loaded.
2Review the detailed sections below for lower-priority hardening opportunities.
3Review the detailed sections below for lower-priority hardening opportunities.
4Review the detailed sections below for lower-priority hardening opportunities.
Speed
100
Exceptional response path
Security
100
core protections are present
SEO
97
crawl assets are discoverable
Bot Access
100
bot responses are aligned
Result Integrity98% measurement confidence · 1 conflict
Speed Confidence
100%
Security Confidence
94%
SEO Confidence
100%
Bot Confidence
100%
LOWCSP contains 'unsafe-inline' — inline script execution is permitted, which is the most common CSP bypass vector
Replace 'unsafe-inline' with nonce-based or hash-based script allowlisting. This single change has more XSS-protection impact than any other CSP improvement.
Main fetch: ok
Security: ok
SEO: ok
20/20 bot probes succeeded
Scoring Methodology
How Your Score Is Calculated
Speed 30%Security 30%SEO 25%Bot Access 15%
CategoryWeightYour Score / 100Points
⚡ Speed 30% 100 30.0
🔒 Security 30% 100 30.0
🔍 SEO 25% 97 24.3
🤖 Bot Access 15% 100 15.0
Overall Score99.3 / 100

Brand Surface signals — favicon, OG image, Twitter card, web manifest & JSON-LD schema — contribute up to 8 pts within the SEO category, equal to a maximum of 2 pts on your overall score.

Bot Importance Hierarchy all ranked bots stable
Ranks crawlers by practical impact so users can tell whether a failure is mission-critical, growth-related, or lower-priority.
Tier 1
Mission Critical
Search and AI discovery bots that most directly affect visibility and retrieval.
stable tier
Google
Stable
3ms / no crawler override
OAI Search
Stable
12ms / no crawler override
GPTBot
Stable
6ms / no crawler override
Vertex AI
Stable
12ms / no crawler override
ChatGPT
Stable
12ms / no crawler override
Perplexity
Stable
6ms / no crawler override
Claude
Stable
6ms / no crawler override
Tier 2
Growth & Distribution
Bots that influence secondary reach, ecosystem visibility, and social preview distribution.
stable tier
Bing
Stable
5ms / no crawler override
Meta AI
Stable
12ms / no crawler override
Amazon
Stable
9ms / no crawler override
Mistral
Stable
12ms / no crawler override
Apple
Stable
6ms / no crawler override
Facebook
Stable
6ms / no crawler override
Twitter
Stable
8ms / no crawler override
LinkedIn
Stable
9ms / no crawler override
Tier 3
Reference & Baseline
Supportive or baseline agents useful for comparison and lower-priority monitoring.
stable tier
ByteDance
Stable
9ms / no crawler override
CommonCrawl
Stable
12ms / no crawler override
DuckDuck
Stable
3ms / no crawler override
Chrome
Stable
9ms / no crawler override
BotWatcher
Stable
9ms / no crawler override
consistent access caution anomaly / blocked
Anomaly Detection peak low drift
Asset Discovery 7/8 public assets visible
HTTPS
TLS active
Cloudflare
MISS
Compression
br
robots.txt
crawl rules live
Sitemap
18 URLs
llms.txt
AI crawler guide
Structured Data
2 schema blocks
Analytics
none detected
Map routes are derived from bot simulation responses and compliance checks. This board is audit-driven, not global telemetry.
Bot Access & Consistency100
Bot Access & Consistency 100
Major tested bots were treated consistently in this audit.
Why this matters
AI search visibility, social previews, and crawler trust can drop when some agents receive different responses or are blocked.
Different bots received different responses
No response divergence detected
Status codes stayed consistent
All tested agents received the same response class
AI crawler guidance
llms.txt present
Bot Status Strip
Google
Bing
DuckDuck
Apple
GPTBot
Claude
Perplexity
Facebook
Twitter
LinkedIn
Chrome
BotWatcher
amazonbot
bytespider
ccbot
chatgptuser
oaisearchbot
mistralaiuser
googlevertexbot
metaexternalagent
BotResultHTTProbots.txtNotes
Googlebot 2.1Accessible200allowed3ms
Bingbot 2.0Accessible200allowed5ms
DuckDuckBotAccessible200unspecified3ms
ApplebotAccessible200unspecified6ms
GPTBot (OpenAI)Accessible200allowed6ms
ClaudeBot (Anthropic)Accessible200allowed6ms
PerplexityBotAccessible200unspecified6ms
Facebook External HitAccessible200unspecified6ms
TwitterbotAccessible200unspecified8ms
LinkedInBotAccessible200unspecified9ms
Chrome (baseline)Accessible200unspecified9ms
BotWatcherAudit/1.0Accessible200unspecified9ms
amazonbotAccessible200unspecified9ms
bytespiderAccessible200unspecified9ms
ccbotAccessible200unspecified12ms
chatgptuserAccessible200unspecified12ms
oaisearchbotAccessible200unspecified12ms
mistralaiuserAccessible200unspecified12ms
googlevertexbotAccessible200unspecified12ms
metaexternalagentAccessible200unspecified12ms
Performance100
TTFB
87ms
Total Time
87ms
Body Size
165.0 KB
Status
200
Compression
br
CF Cache
MISS
HTTPS
Secure TLS
TTFB: 87ms
Exceptional
HTTP 200
OK
Compression
Encoding: br
Cache-Control
public, max-age=0, must-revalidate
ETag
Present
Redirects: 0
No redirects
Cloudflare CDN
CF-Cache-Status: MISS
Security Headers100
HTTPS / TLS
Secure
HSTS
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
default-src 'self'; script-src 'self' https://www.dwin2.com; style-src 'self' 'u…
X-Content-Type-Options
nosniff
Clickjacking protection
Via CSP frame-ancestors
Referrer-Policy
strict-origin-when-cross-origin
Permissions-Policy
camera=(), microphone=(), geolocation=(), payment=(), usb=()
Cross-Origin-Opener-Policy
same-origin
Cross-Origin-Embedder-Policy
credentialless
SEO & Crawlability97
Meta title
VibecodingGPT.ai — Learn AI-Powered Vibe Coding Free
Meta description
Learn vibe coding free. Guides, prompts and playbooks to build real software with ChatGPT, Claude, G…
Canonical URL
https://vibecodinggpt.ai/
Viewport meta
width=device-width, initial-scale=1.0
robots.txt
1 sitemap(s)
Googlebot access
Allowed
Sitemap.xml
18 URL(s)
Open Graph
og:title = "VibecodingGPT.ai — Free Educational Resource for A…"
JSON-LD Structured Data
WebSite, EducationalOrganization
llms.txt (AI compliance)
Present - AI-era ready
Third-Party & Privacy

Analyzes raw HTML source for third-party domains, consent tooling, render-blocking scripts, and tracking pixels. Tools injected at the edge (Cloudflare Zaraz, CF Web Analytics) or loaded dynamically via JS after page load will not appear here — use your browser's Network tab for a complete runtime picture. Results are informational and do not affect your score.

20 third-party domains · 0 render-blocking scripts · ✗ No consent tool ·10 tracking pixels
No analytics detected — you may be flying blind on traffic data
Ad/tracking pixels detected without a visible consent mechanism — potential GDPR/CCPA compliance gap
Third-Party Domains in Source
anrdoezrs.net
awin1.com
awltovhc.com
botwatcher.ai
dpbolvw.net
dwin2.com
fonts.googleapis.com
fonts.gstatic.com
ftjcfx.com
handymanpro.ai
jdoqocy.com
kqzyfj.com
lduhtrp.net
llmadvisor.ai
llmadvisor.review
+ 5 more
Tracking Pixels
awltovhc.com
ftjcfx.com
ftjcfx.com
awltovhc.com
tqlkg.com
awltovhc.com
awltovhc.com
lduhtrp.net
tqlkg.com
tqlkg.com
Platforms Detected in Source
○ Google Analytics 4○ Universal Analytics (UA)○ Google Tag Manager○ Cloudflare Web Analytics○ Cloudflare Zaraz○ Plausible○ Fathom○ Matomo / Piwik○ Hotjar○ Microsoft Clarity○ Segment○ Mixpanel○ Heap○ Amplitude○ HubSpot○ Intercom○ Adobe Analytics○ Meta (Facebook) Pixel○ TikTok Pixel○ Crisp Chat
Domain Surface

Probes common subdomains and non-standard HTTP/HTTPS ports to map the visible attack surface of this domain. Results are based on network-layer responses only. Informational — does not affect your score.

!
Wildcard DNS detected — subdomain results are not meaningful
A probe of a guaranteed-nonexistent subdomain (wildcardtestconfirmationbotwatcherai.vibecodinggpt.ai) returned HTTP 530, definitively confirming a wildcard DNS record (*.vibecodinggpt.ai) is active and answering all subdomain requests. Individual subdomain scan results are unreliable when wildcard DNS is present and have been suppressed.
Non-standard Ports
PortStatusHTTPTTFB
http:8080Responded30157ms
https:8443Responded20067ms
http:3000Responded30164ms
http:8000Responded30166ms
Brand Surface

Inspects the favicon stack, Open Graph tags, Twitter Card, web app manifest, and JSON-LD brand schema from the raw HTML. This covers what search engines, social platforms, and mobile home-screen installers see when representing your brand. Informational — does not affect your score.

Favicon declared but no size ≥48×48 and no SVG — Google may fall back to a globe in search results
No SVG favicon — consider adding one for sharp rendering at any DPI
No web app manifest linked — Android home-screen installs and PWA features unavailable
og:image:alt missing — accessibility and screen-reader support reduced on shared links
Google / Platform Compliance
✓ meets recommendation  ⚠ borderline or fallback  ✕ fails  — not declared
SignalDetected valueStatusGoogle / platform recommendation
og:image declared Yes Required for rich previews on all social platforms
og:image dimensions 1200×630px Google/OG recommend 1200×630px minimum
og:image aspect ratio 1.90:1 1.91:1 — exact 1200×630 satisfies this
og:image:alt declared Missing Required for accessibility; recommended by Google
og:title length 58 chars — "VibecodingGPT.ai — Free Educational Resource for A…" 50–60 chars; max 95 before truncation
og:description length 230 chars 150–160 chars recommended; max 300
og:site_name VibecodingGPT.ai Shown in link previews on Facebook, LinkedIn, Slack
twitter:card type summary_large_image "summary_large_image" for full-width preview in X/Twitter
twitter:image declared Yes Explicit twitter:image preferred; og:image used as fallback
twitter:image:alt Missing Required for accessibility on X/Twitter
twitter:title length 58 chars Max 70 chars displayed in Twitter card
twitter:description 154 chars Max 200 chars in Twitter card preview
Favicon: Google SERP Raster <48×48 only Google Search: SVG or raster ≥48×48px to show in results
JSON-LD Organization VibecodingGPT.ai Helps Google identify your brand in Knowledge Graph
JSON-LD logo Declared Google recommends 112×112px min, max 1:1 ratio, https URL
Coverage
Favicon declared
1 <link rel="icon"> tag
Google SERP-ready favicon
Needs SVG or raster ≥48×48
SVG favicon
Raster favicon (PNG/ICO)
Apple touch icon (iOS home-screen)
Web App Manifest
theme-color meta
#7c3aed
Favicon Preview
favicon
image/png
favicon
apple-touch
Open Graph Image Preview
Open Graph Image Preview
🖼 Preview blocked — site may restrict cross-origin image loading. Open image directly ↗
https://vibecodinggpt.ai/static/og-image.png 1200×630px Open ↗
Favicon Links (1)
hreftypesizesrel
static/finalvibecode.pngimage/pngicon
Apple Touch Icons (1)
hrefsizes
static/finalvibecode.png
Open Graph (Facebook / LinkedIn / Slack / Discord)
og:imagehttps://vibecodinggpt.ai/static/og-image.png
og:image dimensions1200×630
og:image:alt
og:titleVibecodingGPT.ai — Free Educational Resource for AI Coding
og:descriptionFree educational platform teaching vibe coding for small businesses. Step-by-step guides, copy-paste prompts, playbooks, and tools — learn to build real software with ChatGPT, Claude, Gemini & Copilot. No coding experience needed.
og:site_nameVibecodingGPT.ai
og:typewebsite
og:urlhttps://vibecodinggpt.ai/
Twitter / X Card
twitter:cardsummary_large_image
twitter:imagehttps://vibecodinggpt.ai/static/og-image.png
twitter:image:alt
twitter:titleVibecodingGPT.ai — Free Educational Resource for AI Coding
twitter:descriptionFree educational platform: learn vibe coding from scratch. Guides, prompts, playbooks & tools to build real software with AI. No coding experience needed.
twitter:site
Brand Schema (JSON-LD)
Organization schema
name: VibecodingGPT.ai
WebSite schema
Organization logo
https://vibecodinggpt.ai/static/finalvibecode.png