certdrip-go is a real-time domain stream service powered by Certificate Transparency Logs.
It collects newly issued SSL/TLS certificates and streams extracted domain names over WebSocket, supporting use cases such as:
- Reconnaissance and bug bounty automation
- Threat intelligence pipelines
- OSINT domain monitoring
- Passive DNS & subdomain collection
If you prefer a browser-based view, certdrip-go also includes a minimal Web UI to view real-time domains as they appear:
- Fetches active CT logs dynamically from Chrome’s official log list
- Concurrent polling of multiple CT logs (via goroutines)
- Real-time WebSocket endpoint (
/ws) - Minimalist Web UI on port
8081 - Domain deduplication with time-based cache
- Rate reporting (domains per second)
- Filters out empty or intermediate certificates
- Fetch usable CT logs from log_list.json
- Each log is polled in a dedicated goroutine
- Parsed certificates yield Common Name or SAN domains
- Results are sent to:
- Console (
stdout) - WebSocket (
ws://localhost:8080/ws) - Web UI (
http://localhost:8081)
- Console (
- Duplicate domains are cached for 5 minutes (configurable)
- Go 1.20 or higher
- Docker (optional)
git clone https://github.com/idhin/certdrip.git
cd certdrip
go mod tidy
go run main.goOr run with Docker:
docker-compose up --buildConnect to WebSocket using:
npx wscat -c ws://localhost:8080/wsAccess Web UI via:
http://localhost:8081
Contributions are welcome.
You can help by:
- Adding support for new CT endpoints
- Building integrations (Redis, Discord, Kafka, etc)
- Optimizing performance and concurrency
- Improving logging, filtering, or output formatting
Just fork the repo, submit a pull request, or open an issue to get involved.
If you find this project useful or cool, please consider giving it a star on GitHub!
It motivates further development and helps others discover it too.
Developed by:
Khulafaur Rasyidin (@idhin)
github.com/idhin
This project is licensed under the MIT License.
Free to use, modify, and build upon—especially for defenders, researchers, and security engineers.


