I do something similar on my website: https://bini.wales https://bini.wales returns 200 for all endpoints and logs all attempts, so it makes for a decent have a

I do something similar on my website: https://bini.wales https://bini.wales returns 200 for all endpoints and logs all attempts, so it makes for a decent have a honeypot against automated attacks (mostly it just catches people mass scanning for vulnerable WordPress plugins or leftover backdoors). Similarly, https://varun.ch/login https://varun.ch/login emulates a WordPress site (with a twist)