NukingSiteBot

If you saw NukingSiteBot/1.0 (+https://nuking.site/bot) in your logs, someone asked nuking.site to scan your homepage. Here is exactly what that involves.

What it requests

• Your homepage (one GET, following at most 3 redirects), plus /robots.txt.
• One request to http:// to check that it redirects to https://.
• On WordPress sites only: up to 4 well-known paths (/wp-json/, /xmlrpc.php, /readme.html, /wp-login.php), GET only.
• HEAD requests to at most 25 of your own internal links, to find broken ones.
• Google PageSpeed Insights also loads your page, from Google's own infrastructure.

At most 35 requests and 6 MB per scan, never faster than a visitor clicking around. No logins, no form submissions, nothing that changes state. A given URL is scanned at most once a week; repeat requests are served from cache.

How to control it

We respect robots.txt for everything beyond the homepage (the homepage fetch is user-initiated). To opt out completely and remove existing roasts, prove ownership here.