AntileakBot

If you found this page in your server logs, this explains exactly what was requested and why — and how to stop it.

AntileakBot is the crawler behind antileak.io, a service that checks whether AI assistants such as ChatGPT, Claude and Perplexity can read a business's website. It identifies itself as:

Mozilla/5.0 (compatible; AntileakBot/1.0; +https://antileak.io/bot)

When it visits

Only when a person asks it to. A scan is triggered by someone entering a domain on our homepage — there is no background crawl, no discovery queue, and no re-crawling on a schedule. One request from a visitor produces one scan.

The same address can be scanned at most once every three minutes, so AntileakBot cannot become a source of sustained load even if someone tries.

What it requests

Request	Why
`GET /`	Read the homepage's raw HTML — the same bytes an AI crawler gets, since none of them run JavaScript.
`GET /robots.txt`	Check whether AI crawlers are disallowed.
`HEAD /llms.txt`	Check whether the site publishes one.
`HEAD` on up to 8 internal links	Find broken links reachable from the homepage.

That is the whole of it: eleven requests at the very most, all read-only, plus one more if http:// redirects to https://. AntileakBot does not execute JavaScript, does not log in, does not submit forms, does not follow links beyond the homepage, and never requests the same page twice in a scan. It also looks up your domain's public DNS TXT records (SPF, DKIM, DMARC) through Cloudflare's resolver, which does not touch your server at all.

It does not keep a copy of your pages. A scan stores its results — the scores, which checks passed, which were missing — along with your homepage's <title> and meta description, because those are what the report quotes back to you. The page body is measured and discarded. Nothing is used to train a model.

How to block it

Add this to your robots.txt. AntileakBot honours it, and a blocked scan simply reports that it was blocked:

User-agent: AntileakBot
Disallow: /

Blocking by user agent at your firewall or CDN also works. We would rather you did that than rate-limit us into retrying.

Contact

Questions, or want your domain permanently excluded from scanning? Email services@antileak.io and we will add it to a suppression list that applies before any request is made.