We scan IP x.x.x.x, Qualys PCI performs some HTTP checks using host name sample.domain.com. How does Qualys PCI know that this virtualhost is hosted on this IP address? The only guess is that it takes info from web application(sample.domain.com is in our Web app assets and this name is really linked with x.x.x.x IP).
I am very curious.
Thanks in advance, Philipp.