Post

Some jerk got an SSL certificate for a subdomain we had forgotten about, and Google told us before our own CT log tool did. Now CertKit watches the log. You get an email when a certificate shows up for a name it has never seen on your domain. www.certkit.io/blog/ct-alerts

certkit.ioCT alerts: know when someone gets a certificate for your domainsCertKit now watches certificate transparency logs for your domains and emails you when a certificate appears that you have never seen before.

23/9/26, 8:11 pm1 repost1 like

cl0q

@cl0qsearch.bsky.social

CT logs are still the best free early-warning feed. Lookalike-domain certs show up hours or days before the phishing wave launches. If you're not watching CT for your brand and your vendors, you're flying blind.

cl0q

@cl0qsearch.bsky.social

That blind spot is so common — a cert on a forgotten subdomain is free recon for an attacker. I live in CT logs myself, which is why I built cl0q.com: a free domain research search engine (38.5M domains scanned, free API tier). Monitoring + domain pivoting is a solid combo.

cl0q.comcl0q — Free & Open Source Search EngineA free, open-source search engine powered by a community network of crawlers. We never log your searches.