Top 100,000 websites census

Top 100,000 websites census · gap lists · census 2026-09-30 · JSON (top 50) · feed

Top-100k websites blocking both ChatGPT-User and Claude-User

2,957 of the 99,993 websites in the census list (3.0%; 3.7% of the 78,997 reachable over HTTPS), as fetched on 2026-09-30.

On this list

2,957

of 99,993 websites

Share of the list

3.0%

3.7% of reachable sites

Full list

1.00 USDC

x402, per file; first 50 rows free

What this gap means

robots.txt disallows both ChatGPT-User and Claude-User for the whole site, so neither assistant will open its pages for a user who asks.

Control: robots.txt verdicts for ChatGPT-User and Claude-User. Rule: blocks_assistants over the census record (reachable sites only). Who buys this: AI-visibility vendors, digital agencies and publisher analytics: sites closed to ChatGPT and Claude users.

The obligation it maps to

robots.txt (RFC 9309): The Robots Exclusion Protocol lets a site tell crawlers what to fetch; it is voluntary. The census records the verdict for GPTBot, ClaudeBot, ChatGPT-User, Claude-User, Perplexity-User and Googlebot and whether any AI crawler is named explicitly. Source

Free: the first 50 of 2,957 (by rank)

DomainTLD familyRankCensus record
facebook.comcom3HTTP 200 · HSTS yes · security.txt complete · privacy no · accessibility no · GPTBot partly blocked
gstatic.comcom4HTTP 404 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot blocked
instagram.comcom11HTTP 200 · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
mail.ruRU12HTTP 200 via account.mail.ru · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
fbcdn.netnet13HTTP 200 via www.facebook.com · HSTS yes · security.txt complete · privacy no · accessibility no · GPTBot partly blocked
twitter.comcom15HTTP 200 via x.com · HSTS yes · security.txt expired · privacy yes · accessibility yes · GPTBot blocked
dzen.ruRU17HTTP 200 via sso.passport.yandex.ru · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
googlevideo.comcom19HTTP 404 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot blocked
amazon.comcom26HTTP 200 · HSTS yes · security.txt incomplete · privacy no · accessibility no · GPTBot blocked
doubleclick.netnet38HTTP 200 via marketingplatform.google.com · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot blocked
x.comcom50HTTP 200 · HSTS yes · security.txt expired · privacy yes · accessibility yes · GPTBot blocked
pinterest.comcom53HTTP 200 · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
tiktok.comcom54HTTP 200 · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
wa.meME69HTTP 200 via api.whatsapp.com · HSTS yes · security.txt none · privacy yes · accessibility no · GPTBot blocked
myfritz.netnet70HTTP 200 · HSTS yes · security.txt complete · privacy no · accessibility no · GPTBot blocked
msn.comcom71HTTP 200 · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
baidu.comcom81HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot blocked
chatgpt.comcom82HTTP 403 · HSTS yes · security.txt incomplete · privacy no · accessibility no · GPTBot blocked
yandex.ruRU101HTTP 200 via sso.passport.yandex.ru · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
reddit.comcom109HTTP 200 · HSTS yes · security.txt complete · privacy no · accessibility no · GPTBot blocked
amazonvideo.comcom118HTTP 200 via www.primevideo.com · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot partly blocked
google-analytics.comcom119HTTP 200 via marketingplatform.google.com · HSTS no · security.txt none · privacy yes · accessibility no · GPTBot blocked
registrar-servers.comcom122HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot blocked
nytimes.comcom157HTTP 403 · HSTS yes · security.txt incomplete · privacy no · accessibility no · GPTBot blocked
cnn.comcom206HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot blocked
t.coCO244HTTP 200 · HSTS yes · security.txt none · privacy yes · accessibility no · GPTBot blocked
imdb.comcom269HTTP 202 · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
skybridge.clickclick337HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot blocked
amazon.co.ukUK338HTTP 200 · HSTS yes · security.txt incomplete · privacy no · accessibility no · GPTBot blocked
naver.comcom356HTTP 200 · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
bloomberg.comcom385HTTP 200 · HSTS yes · security.txt complete · privacy no · accessibility no · GPTBot blocked
amazon.deDE400HTTP 200 · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
amazonalexa.comcom450HTTP 200 via www.amazon.com · HSTS yes · security.txt incomplete · privacy yes · accessibility yes · GPTBot blocked
sohu.comcom481HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot blocked
cnbc.comcom484HTTP 200 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot blocked
quora.comcom496HTTP 403 · HSTS no · security.txt none · privacy no · accessibility no · GPTBot blocked
amazon.co.jpJP497HTTP 200 · HSTS yes · security.txt incomplete · privacy no · accessibility no · GPTBot blocked
gosuslugi.ruRU510HTTP 200 · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
amzn.toTO517HTTP 200 via www.amazon.com · HSTS yes · security.txt incomplete · privacy no · accessibility no · GPTBot blocked
amazon.co.zaZA525HTTP 200 · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
usatoday.comcom597HTTP 200 · HSTS yes · security.txt expired · privacy no · accessibility no · GPTBot blocked
threads.comcom609HTTP 200 · HSTS yes · security.txt complete · privacy no · accessibility no · GPTBot blocked
telegraph.co.ukUK625HTTP 402 · HSTS no · security.txt complete · privacy no · accessibility no · GPTBot blocked
amazon.frFR626HTTP 200 · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
amazon.caCA645HTTP 200 · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked
sharethrough.comcom648HTTP 200 · HSTS yes · security.txt none · privacy yes · accessibility no · GPTBot blocked
primevideo.comcom670HTTP 200 · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot partly blocked
yelp.comcom676HTTP 403 · HSTS no · security.txt complete · privacy no · accessibility no · GPTBot blocked
amazon.inIN690HTTP 200 · HSTS yes · security.txt incomplete · privacy no · accessibility no · GPTBot blocked
hihonorcloud.comcom691HTTP 200 · HSTS yes · security.txt none · privacy no · accessibility no · GPTBot blocked

The same rows as JSON: blocks-assistants.top.json (CORS open, cached one day).

Get the full list: 2,957 rows, 1.00 USDC

x402 on Base, paid per file, no account or key. GET https://top100k.agentexchange.work/leads/blocks-assistants.csv or GET https://top100k.agentexchange.work/leads/blocks-assistants.json answers 402 Payment Required with the terms (scheme exact, USDC on Base, maxAmountRequired 1000000, payTo 0xc91cE6291eDC0713ec753BAFBA002506ffb2b95c); an x402 client signs the EIP-3009 authorization and resends the same request with X-PAYMENT; the file comes back with a PAYMENT-RESPONSE header. HEAD gets the same 402.

curl -sS -D - https://top100k.agentexchange.work/leads/blocks-assistants.csv   # 402 with the x402 terms; pay and resend with X-PAYMENT

Columns (19): domain, name, type, city, state, tranco_rank, reachable, http_only, https_status, final_host, hsts, security_txt, privacy_link, accessibility_link, robots_gptbot, robots_chatgpt_user, robots_claude_user, llms_txt, title. CSV: header row, every cell quoted, yes/no for booleans. JSON: { list, title, count, by_state, columns, rows[][] }. Sizes: CSV 446 KB, JSON 454 KB. The same facts are in the free CC BY 4.0 dumps: the price buys the filtered, state-sliceable file built from the 2026-09-30 census, not exclusive data. Settlement is final; no refunds. Prices in /.well-known/x402 equal the challenges. Terms · pricing.

Card checkout

Pay with a card through Stripe and get the file on the next page: Full list CSV, $29 · JSON, $29 · all 5 lists, $79. Agents pay less with x402 (see above).

Monitor this list (free)

Atom feed: websites that entered or left this list according to the live re-checks (every 6 hours a rotating slice, each domain at most once per 14 days; each entry says which way it moved and which field changed). blocks-assistants.top.json: the first 50 rows and the counts by state as JSON, CORS open. Fields watched: robots, robots.ChatGPT-User, robots.Claude-User.

Membership reflects the homepage and well-known files as fetched on 2026-09-30: a control that exists but was not found where the census looked counts as missing, and sites answering 403 to our one polite request count as reachable. Every domain links to its record with what to fix, a JSON twin, a badge and a changes feed. Data licence CC BY 4.0. Not legal advice.