Honeypot

The honeypot is an invisible link on your pages that catches scrapers who ignore robots.txt. Any crawler that follows it is recorded as a bot with detection_method: honeypot — no user-agent check needed.

It takes under five minutes to add and works alongside any other install method.

How it works

You add a hidden <a> link to your pages pointing to https://tracker.moszaic.ai/trap?pid=your-property-id
You add Disallow: /trap to your robots.txt
Well-behaved crawlers (Googlebot, GPTBot, ClaudeBot) read robots.txt and skip the link
Scrapers that ignore robots.txt follow the link — MOSZAIC records the hit as a confirmed bot

The endpoint always returns 200 OK regardless of what hits it — it never tips off a scraper that it’s been caught.

Step 1 — Add the hidden link

Paste this inside <body> on every page, replacing the property ID with yours:

<a href="https://tracker.moszaic.ai/trap?pid=your-property-id"
   style="display:none" aria-hidden="true" tabindex="-1">.</a>
<script>document.currentScript.previousElementSibling.remove();</script>

The <script> removes the element from the DOM immediately after render, so it is invisible to humans and inaccessible by keyboard navigation. The scraper sees it in the raw HTML before JavaScript runs.

Step 2 — Block it in robots.txt

Add this line to your robots.txt:

Disallow: /trap

This is what separates well-behaved crawlers (which respect the rule) from scrapers (which don’t).

Step 3 — Verify

Visit https://your-site.com/trap?pid=your-property-id directly in your browser. A honeypot event should appear in your MOSZAIC dashboard within a few seconds with detection_method: honeypot.

Platform-specific notes

Squarespace: Add the hidden link via Settings → Advanced → Code Injection → Footer. Add robots.txt content via Settings → Advanced → robots.txt.

Webflow: Add the link via Site Settings → Custom Code → Footer Code. Webflow has a built-in robots.txt editor under Site Settings → SEO.

WordPress: Use a footer injection plugin (e.g. Insert Headers and Footers) for the link. Edit robots.txt via your hosting control panel or an SEO plugin like Yoast.

Static sites: Add the link to your base template’s <body> and edit robots.txt at the root of your output directory.

What gets captured

Every honeypot hit is recorded in your dashboard with:

Field	Value
`event_type`	`bot`
`detection_method`	`honeypot`
`bot_name`	User-agent string if recognized, otherwise `unknown-scraper`
`confidence`	`medium` (or `high` if user-agent also matches a known bot)

Honeypot events appear in your Raw Events feed and count toward your bot traffic metrics.