It is wise to use your IP address as the hostname of the default website
# and give it a blank webpage. By doing so, automated webscanners won't find
# your possible vulnerable website.
In my opinion it would be better to return an 403 with a message like "please use exaple.com to connect".
Is there some reason why a blank page is better?
Wabuo