By Evan Vega
A Novel Cognition pre-print put 18 empty hostnames on three domains: nine named in their own certificate and so published in the Certificate Transparency logs, nine covered only by a wildcard certificate. All 9 logged names were requested within 1.2 to 4.4 seconds of the log entry; 8 of the 9 unlogged names drew no outside request in 24 hours. ClaudeBot and GPTBot reached every logged name within minutes, and 92% of scanner requests in the first hour hunted for files such as /.env.
Related: Frontier Watch