No AI Detected

• HTTPS (passed)The page is served over a secure connection.
• Meta description (passed)121 characters, a good length.
• Main heading (H1) (passed)Exactly one H1.
• Heading structure (passed)Headings follow a logical order.
• Search engines can index it (passed)Nothing stops search engines from indexing this page.
• robots.txt (passed)Found.
• XML sitemap (passed)Found with 748 URLs.
• Language (passed)Declared as en.
• Mobile friendly viewport (passed)Viewport tag set.
• Image alt text (passed)All 3 images have alt text.
• Content on the page (passed)878 words.
• Server response time (passed)103 ms for the HTML.
• Favicon (passed)Declared.

1. H1WhereHalloweenNever Ends
2. H2Enter the Haunt
3. H2Claim Your Stitched Faces Badge
4. H3The Stitched Faces Badge
5. H3Forever part of the Build
6. H3Direct Line to the Dev
7. H2Built for Every Corner of the Haunt Industry
8. H3No Algorithm. No Intrusive Ads. No Censorship.
9. H3For Scare Actors & Performers
10. H3For Attraction Owners & Operators
11. H3For Fans & Horror Enthusiasts
12. H3For Vendors, Podcasts & Creators
13. H3Ready to Enter the Haunt?

• HTTPS (passed)The site uses an encrypted connection.
• Certificate (passed)Valid for another 58 days, issued by Google Trust Services.
• HSTS (passed)Browsers are told to always use HTTPS.
• Content Security Policy (passed)A policy limits which scripts and resources can load.
• Clickjacking protection (passed)Other sites can't embed the page in a frame.
• MIME sniffing (passed)X-Content-Type-Options is set.
• Referrer policy (passed)Controls what is shared with other sites when visitors follow a link.
• Permissions policy (passed)Limits access to camera, microphone and other browser features.
• Software versions hidden (passed)Response headers don't reveal software versions.

og:type

website

og:site_name

Haunted 365

og:title

The Haunted Platform - Haunted 365 & HR for Haunters · Haunted 365

og:description

Connect with haunted attraction professionals, share knowledge, and grow your career in the haunted attractions industry.

twitter:card

summary

twitter:title

The Haunted Platform - Haunted 365 & HR for Haunters · Haunted 365

twitter:description

Connect with haunted attraction professionals, share knowledge, and grow your career in the haunted attractions industry.

csrf-token

DT4zMTwzJCw-a3wbdAAVZABOZ1QrDzMOuXadSyvXi8DhFQZP-vPasHDi

mobile-web-app-capable

yes

apple-mobile-web-app-capable

yes

apple-mobile-web-app-title

Haunted 365

apple-mobile-web-app-status-bar-style

black-translucent

# Haunted 365
#
# Public pages — the haunt directory, job board, and marketing pages — are open
# to crawlers, AI crawlers included. That is deliberate. Member-authored content
# lives behind authentication and is never served to an unauthenticated request,
# so the auth wall is the control here, not this file.
#
# Note what is NOT listed below: the authenticated paths (/app, /haunter, and
# the per-tenant HR routes). Well-behaved crawlers already stop at the login
# redirect, and naming those prefixes here would only advertise them to the
# crawlers that ignore this file.
#
# There is no Content-Signal line by design. Nothing is restricted today, and
# staying silent preserves the option to restrict later without having first
# published an express grant.

User-agent: *
Allow: /

# Endpoints with nothing worth indexing. The /claim, /badges/claim, /booth and
# /users token paths carry single-use credentials in the URL and must never
# enter a search index; the rest simply burn crawl budget.
Disallow: /api/
Disallow: /proxy/photo
Disallow: /media/
Disallow: /booth/
Disallow: /claim/
Disallow: /badges/claim/
Disallow: /staff/accept/
Disallow: /users/

Sitemap: https://www.haunted365.com/sitemap.xml

date

Thu, 05 Nov 2026 01:13:14 GMT

content-type

text/html; charset=utf-8

cache-control

max-age=0, private, must-revalidate

report-to

{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kZVAfTlCbrP5qgMvjDV6o5J2Km1fNOHpT61rxV1IlPJGhIkGDrgDFBzAvovqARERsx8YlgBfv%2BMjGtCuum9RBBRq1%2Bv5TDZtIwBdgAtG1lGcHmiICe6h9j43SsS33xZ9"}]}

content-security-policy

script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://lh3.googleusercontent.com https://maps.googleapis.com https://maps.gstatic.com https://lh3.ggpht.com https://*.digitaloceanspaces.com https://challenges.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com; default-src 'self'; connect-src 'self' wss://www.haunted365.com wss://admin.haunted365.com https://*.digitaloceanspaces.com https://cloudflareinsights.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'; upgrade-insecure-requests

permissions-policy

accelerometer=(), autoplay=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(self), picture-in-picture=(), publickey-credentials-get=(self), usb=(), web-share=()

referrer-policy

strict-origin-when-cross-origin

set-cookie

_industry_hub_frontend_key=…; path=/; secure; HttpOnly; SameSite=Lax

strict-transport-security

max-age=31536000; includeSubDomains; preload

vary

accept-encoding

x-content-type-options

nosniff

x-frame-options

DENY

x-request-id

GOUBD_aW-vHvvD4AQvkx

cf-cache-status

DYNAMIC

nel

{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}

server-timing

cfCacheStatus;desc="DYNAMIC"

server-timing

cfEdge;dur=39,cfOrigin;dur=35

content-encoding

br

server

cloudflare

cf-ray

a557feaa3f7c4b6f-SJC

alt-svc

h3=":443"; ma=86400