How We Find B2B Leads the Moment a New Website Goes Live
CertLeads watches public Certificate Transparency logs to spot new business websites within a day of launch. Here is how the pipeline works, step by step.
Key takeaways
- Every public SSL certificate is written to Certificate Transparency logs, usually within minutes of being issued.
- A brand-new domain getting its first certificate is one of the earliest public signals that a new business website exists.
- CertLeads watches those logs, checks the site is actually live, and reads the contact details the site publishes, usually within 24 hours of launch.
- Every lead carries a freshness tier (green, amber or red) and is sold to at most 3 buyers.
Most B2B contact databases are built the same way. Crawl the web, extract what is public, and refresh it on a schedule measured in months. By the time a lead reaches you, the company behind it may already have heard from several vendors working from versions of the same list.
CertLeads works from the other end. Instead of waiting for a crawler to stumble on a business, we watch for the moment a new business website appears. This post explains how that works, and why it matters if you sell to new companies.
The signal: a new SSL certificate
Almost every website now runs over HTTPS, which means it needs an SSL/TLS certificate. Since 2018, browsers like Chrome and Safari only trust a certificate if it has been written to public Certificate Transparency (CT) logs. These are append-only, publicly auditable records that every certificate authority writes to when it issues a certificate.
The result is a near-real-time public stream of every new certificate issued on the internet. When someone launches a site on a domain that has never had one before, its first certificate shows up in the logs. That usually happens on the day the site goes live, often before the business has done any marketing at all.
We wrote a full explainer on what Certificate Transparency is if you want the background.
The pipeline, step by step
- Watch the logs. We follow the CT log stream continuously (the same public data exposed by feeds such as CertStream) and pick out domains we have never seen before.
- Filter the noise. Most certificates are not new businesses. They are renewals, internal subdomains, test environments and automated hosting. We drop those and keep the registrable domains that look like a new public site.
- Check it is live. A certificate proves a domain exists, not that a business does. We load the site and confirm it resolves to a real, reachable page before going further.
- Read what the site publishes. We record the contact details the business chose to put on its own website (email addresses, phone numbers and company social profiles), plus the platform the site runs on and an SEO score.
- Apply the contact policy. For companies in United States, Canada, United Kingdom, India, United Arab Emirates, New Zealand, Australia and Singapore, contacts are shown as found. Everywhere else, including the EU, we only show impersonal company contacts such as info@ or a main switchboard number, never personal names, mobiles or personal email addresses.
- Publish. The lead appears in the searchable directory, typically within 24 hours of the site going live, with its source URL and crawl date attached.
Why timing is the whole product
A newly launched website usually means a newly formed company, or an existing one starting something new. Either way, it is buying things right now: a payment processor, accounting software, insurance, a bookkeeper, a designer, advertising.
The vendors who reach them first, while those decisions are still open, have a real advantage over the ones working from a list that has already been sold several times. A message landing in week one competes with almost nobody. The same message landing in month six competes with everyone who bought the same database.
Freshness you can see, not "updated regularly"
Every contact carries a freshness tier, so you can see how current it is before you use it:
| Tier | What it means |
|---|---|
| Green | Live within the last 7 days, with a strong contact read cleanly from the site and never one we have checked and found undeliverable |
| Amber | Live within the last 30 days, with at least one usable contact method, shared mailboxes included |
| Red | Older than 30 days, or no contact we are willing to stand behind |
The boundaries are deliberately strict. We would rather call a lead amber and have you pleasantly surprised than call it green and have you judge the whole dataset by it.
Limited exposure, by design
Fresh data loses its value fast if everyone has it. So every lead is delivered to at most 3 buyers, with a cooldown between sales, and your account is never charged for the same lead twice. We explain the reasoning in why most contact databases are already stale.
What this approach does not do
It is worth being straight about the limits:
- It finds websites, not people. We read what a business publishes on its own site. If a site lists no contact details, we have none to give you.
- Not every certificate is a business. Filtering is good, not perfect. Some leads will be personal projects or placeholder pages, which is why the freshness tier and contact checks exist.
- It is not a historic database. If you need every dentist in Ohio, a traditional directory is a better tool. CertLeads is for reaching businesses that just appeared.
Try it
The CertLeads directory shows newly launched businesses as they arrive, free to browse with no card required. If you want a feel for the data first, the free sample shows the last 24 hours.
Frequently asked questions
How does CertLeads find new businesses?
It monitors public Certificate Transparency logs for domains receiving their first SSL certificate, confirms the website is live, and records the contact details the business publishes on its own site. New sites typically appear in the directory within 24 hours of launch.
Is Certificate Transparency data public?
Yes. Certificate Transparency logs are public, append-only records that certificate authorities must write to for browsers to trust a certificate. Anyone can read them.
Does CertLeads show personal contact details in every country?
No. Full contacts are shown for companies in United States, Canada, United Kingdom, India, United Arab Emirates, New Zealand, Australia and Singapore. Everywhere else, including the EU, only impersonal company contacts such as role addresses and main phone lines are shown.