I just wrote a scanner that scans all the domains from the domain list for DNS records and then GET’s all IPs for the 2 spoofed Host headers, unfortunately it didn’t get any 200’s back (both raspberrypi.homeyshs.net and ota-api.homeyshs.net/api/v1/changelog?channel=stable). Except for the GitHub IPs, but those don’t contain any useful info unfortunately. I have the feeling that it must be somewhere, but I think that’s on a local IP or server then.
