News for hackers. Stuff that matters.
Re:Ask HN: How did internet discover my subdomain? by BrandoElFollito on Friday March 07, 2025 @01:21AM (#43287735)
And this is the correct answer, thank you.

Transparency logs are fine except if you have a wildcard cert (or no https, obviously).

IP scans are just this: scans for live ports. If you do not provide a host header in your call you get whatever the default response was set up. This can be a default site, a 404 or anything else.

There are no comments on this comment yet.