The certificate transparency log is also a good place to look for clues. ⁨https://crt.sh