Thank you both for helping
I might have misunderstood the problem and made the wrong title.
I don't want a wildcard subdomain accessible at all.
The only sites I want working is the main domain, and the sub domain, blog.
I thought I misconfigured something because you can type anything as a subdomain to go to the http version. Like mail. or https://anyword.alexisburrows.xyz
I don't know why it doesn't just lead to an apache Not Found page like it should.