alt Hacker NewsCertificate transparency logs get scraped. However, they cannot scrape wildcards. Get a domain.example + *.domain.example cert and host your blog on blog.domain.example and you can keep the bots from finding you, at least for a little while.
Certificate transparency logs get scraped. However, they cannot scrape wildcards. Get a domain.example + *.domain.example cert and host your blog on blog.domain.example and you can keep the bots from finding you, at least for a little while.
No, it wouldn't. Just yesterday I added a domain.example + *.domain.example certificate, and today some bot comes to scan for subdomains: api, app, backup, beta, cdn, ci, mail etc. Blog isn't in the list, but just for this bot.