Spot phishing domains in certificate records.
What it does
Guides certificate-log analysis to identify suspected phishing domains and produce a threat intelligence report.
When to use it
Use when investigating phishing-related security incidents or validating certificate-based security monitoring coverage.
How to use it
Give it organization domains and brand keywords; it produces a saved Markdown report of suspicious certificates and real-time alerts.
What you provide
- organization domains
- brand keywords
Uses
Latest review
What you need · 5
Requires Python 3.9 or later for the monitoring workflow.
Requires requests for HTTP certificate-history queries.
Access · 2
This skill
crt.sh
Read
Queries crt.sh certificate records
Certstream
Read
Reads live Certstream certificate updates