haveibeenpwned.com
Domduck has read haveibeenpwned.com on 6 days across 5 sources, since 2 August 2026. The domain was registered in 2013. Its robots.txt blocks none of the 8 AI crawlers Domduck tracks.
Last checked .
Charts appear once there are seven days of readings.
blocked
What changed
6 days of readings- 15 September 2026 (2026-09-15)
- robots.txt started returning HTTP 304 between 31 August 2026 and 15 September 2026, from 200.
- The certificate was renewed between 31 August 2026 and 15 September 2026 and is valid to 2 December 2026.
- 31 August 2026 (2026-08-31)
- robots.txt started returning HTTP 200 between 17 August 2026 and 31 August 2026, from 304.
- The certificate was renewed between 17 August 2026 and 31 August 2026 and is valid to 16 November 2026.
- 17 August 2026 (2026-08-17)
- robots.txt started returning HTTP 304 between 3 August 2026 and 17 August 2026, from 200.
- The certificate was renewed between 3 August 2026 and 17 August 2026 and is valid to 6 November 2026.
Popularity rank
73 days, lower is betterPosition in the Tranco list, a research ranking of the million most popular domains averaged over thirty days so a single day’s traffic spike cannot move it.
AI crawler policy
No llms.txtNo ChatGPT browsing or training
No ChatGPT search surface
No Claude retrieval
No Perplexity citation
Out of Gemini and AI Overviews grounding, Search ranking unaffected
Out of Apple Intelligence training
Out of most open training corpora
Out of TikTok and Doubao
Read from haveibeenpwned.com/robots.txt. “Not named” means the file says nothing about that agent, which is not the same as allowing it: a catch-all rule added later blocks it without anyone deciding to.
What the domain itself says
read directly, not from a vendor- Issuer
- Google Trust Services
- Valid
- Yes
- Expires
- 2026-12-02
- Protocol
- TLSv1.3
- Names covered
- 2
- A records
- 2
- AAAA records
- 2
- Mail exchangers
- 2
- Nameservers
- leah.ns.cloudflare.com, rob.ns.cloudflare.com
- DMARC policy
- reject
- Registered
- 2013-11-13
- Registrar
- 1API GmbH
- Registry status
- client transfer prohibited
How haveibeenpwned.com compares to other .com domains
Questions
- Does haveibeenpwned.com block GPTBot?
- No. haveibeenpwned.com's robots.txt does not disallow GPTBot, though it does not name the agent either.
- Does haveibeenpwned.com publish an llms.txt file?
- No. Domduck found no llms.txt at haveibeenpwned.com.
- When was haveibeenpwned.com registered?
- 13 November 2013, through 1API GmbH.
- Who issues haveibeenpwned.com's certificate?
- Google Trust Services.
How this page is made
Every number on this page is a measurement Domduck took itself or read from a public source, on a stated date. Nothing here is written by a language model. Where a value has not changed, no sentence is generated about it.
First reading . 5 sources, 6 days with at least one reading. The popularity rank comes from the Tranco list; the registration record from RDAP, which ICANN requires registries to publish. The certificate, the DNS records and the crawler policy are read by Domduck directly from haveibeenpwned.com.