Bots Reached New Web Addresses 1.2 to 4.4 Seconds After Their Certificates Were Logged, Study Finds

Bots Reached New Web Addresses 1.2 to 4.4 Seconds After Their Certificates Were Logged, Study Finds

0 View

Publish Date:
13 November, 2026
Category:
CNN
Video License
Standard License
Imported From:
Youtube

By Evan Vega

A Novel Cognition pre-print put 18 empty hostnames on three domains: nine named in their own certificate and so published in the Certificate Transparency logs, nine covered only by a wildcard certificate. All 9 logged names were requested within 1.2 to 4.4 seconds of the log entry; 8 of the 9 unlogged names drew no outside request in 24 hours. ClaudeBot and GPTBot reached every logged name within minutes, and 92% of scanner requests in the first hour hunted for files such as /.env.


Read the full investigation →

Related: Frontier Watch

Read the pre-print →