Comment on How are people discovering random subdomains on my server?
Keelhaul@sh.itjust.works 3 days agoHave you also tried making a subdomain and not making any requests to it yourself? So no browser access or other DNS resolution requests for the new subdomain. That should rule out some of the other possible causes suggested in the other comments.
Morphit@feddit.uk 2 days ago
Dang, it could be the upstream DNS server passing along client queries. Maybe the ISP?
In that case not even curl wouldn’t be safe unless you could ensure all queries only resolve on your gear. Either use a host file entry or local DNS server.