hunter

Watches Certificate Transparency logs in real time and flags newly issued domains that look like crypto scams. Right now there's one detector — an "MEV / Uniswap" page heuristic — but the structure (ingest/src/workers/scams/) makes it easy to drop in more.

Layout

• ingest/ — Bun worker that subscribes to CertStream, pulls each new domain, fetches the page, and runs detectors in per-domain Web Workers. Matches log to stdout / Axiom.
• website/ — Next.js + reagraph stub for visualising hunted domains (currently a placeholder graph).

Run the ingest worker

cd ingest
bun install
bun start