/ Is Vibed
$ npx is-vibed [domain]
cursor.com Rescan

No builder fingerprint found

Nothing in the page, the bundle or public DNS names a website builder. That is not proof it was hand-written — Cursor, Claude Code and Copilot leave no trace at all.

90/ 100 finish
Prompt to improve one loose end · 1 scored finding · 3017 words in initial HTML
AttributionMarks the builder left behind clear
DefaultsScaffold settings never changed clear
FinishProduction basics not yet done −10
SafetySecrets and data access clear

Prompt to improve Open as text
You are working on the codebase behind cursor.com.

An external scan of the deployed site found the tells listed below — the specific things that make it read as assembled by a website builder rather than built. Fix them in the order given. Each item names the evidence observed on the live page, so you can confirm the problem before you change anything.

Rules for this task:
- Do not redesign the site. Change only what each item asks for.
- Do not change any URL, route or page title beyond what an item explicitly requires.
- If an item does not match what you find in the code, say so and skip it rather than inventing a change.
- Work through the list top to bottom and report what you changed for each.

## Scaffold defaults still in place

### 1. Hosted on a general-purpose deploy platform
Observed on the live site: Vercel (CNAME)

Noted only for context: DNS shows Vercel (CNAME). This is not evidence of anything — these platforms host a large share of hand-built sites too. No action needed.

### 2. Deploy-platform response headers
Observed on the live site: x-vercel-id (Vercel)

Noted for context only: x-vercel-id (Vercel). Deploy-platform headers say where a site is hosted, not how it was written.

## Unfinished production basics

### 3. Unknown URLs return 200 instead of 404 (SPA catch-all)
Observed on the live site: GET /is-vibecoded-probe-7kopcto → 200 (expected 404)

Make unknown URLs return a real HTTP 404. The catch-all currently answers 200 for paths that do not exist (GET /is-vibecoded-probe-7kopcto → 200 (expected 404)), so every typo and dead link gets indexed as a duplicate page. Serve the not-found view with a 404 status code, not a client-side redirect.

## Default visual styling

### 4. The default blue-to-purple gradient hero
Observed on the live site: untouched Tailwind palette hex: #3b82f6

Replace the stock indigo/violet gradient with a palette of your own (untouched Tailwind palette hex: #3b82f6). Pick one brand hue, derive a real scale from it, and define it as CSS custom properties. Every site built from the same default palette looks like the same site.

### 5. Emoji used as feature icons
Observed on the live site: 8 emoji in page text

Swap the emoji feature icons (8 emoji in page text) for a consistent icon set rendered as SVG. Emoji render differently on every platform and are the most recognisable shorthand for a page assembled quickly.

## When you are done

Re-run the checks yourself before reporting: fetch the deployed page with curl and confirm the markers above are gone from the HTML, that unknown paths return 404, and that `/robots.txt` and `/sitemap.xml` answer 200. Then summarise anything you deliberately did not change and why.

Findings

× Unknown URLs return 200 instead of 404 (SPA catch-all)GET /is-vibecoded-probe-7kopcto → 200 (expected 404) −10
The default blue-to-purple gradient herountouched Tailwind palette hex: #3b82f6 noted
Emoji used as feature icons8 emoji in page text noted
Hosted on a general-purpose deploy platformVercel (CNAME) noted
Deploy-platform response headersx-vercel-id (Vercel) noted