And this is the correct answer, thank you. Transparency logs are fine except if you have a wildcard cert (or no https, obviously). IP scans are just this: sca

And this is the correct answer, thank you. Transparency logs are fine except if you have a wildcard cert (or no https, obviously). IP scans are just this: scans for live ports. If you do not provide a host header in your call you get whatever the default response was set up. This can be a default site, a 404 or anything else.