Hacker News new | ask | show | jobs
by lambdaxyzw 775 days ago
You can set up your own certificate transparency listener, and get notified of every certificate created, in realtime, assuming you can handle the load. In my company we do this to scan new domains for potential phishing domains, to take them down before they become active.
2 comments

And if you need a concrete tool, use something like Certstream [1].

[1] https://certstream.calidog.io/

The amount of json you get from it it terrifying. If you do play, I found when piping though jq it could not keep on on my machine, but a jq clone called jaq handled it with no problem.
Interesting. What exactly are you looking for? Domain names that are similar like Micr0sotf.com and such?