← cipherwake.io · All watchlists
Cipherwake watchlist

Largest Wildcard Cert Sprawl · Single-Key Multipliers

When a single wildcard cert covers 50+ subdomains, the entire subdomain population shares one private key. One compromise unlocks them all. These domains have the largest single-key exposure surface in the curated peer set.

# Domain Score Grade Sector Freshness
1 stripe.com 6.0 D — verified 3h ago
2 gm.com 5.9 C — verified 21h ago
3 treasury.gov 5.9 C — verified 5h ago
4 monday.com 5.9 C — verified 1h ago
5 audi.com 5.8 C — verified 29h ago
6 gitlab.com 5.8 C — verified 5h ago
7 volkswagen.com 5.4 C — verified 15h ago
8 politico.com 5.4 C Global News & Media stale (2d old)
9 netlify.com 5.3 C — verified 3h ago
10 hyundai.com 5.0 C Global Automakers verified 33h ago
11 reuters.com 5.0 C Global News & Media verified 9h ago
12 citi.com 5.0 C — verified 5h ago
13 fidelity.com 5.0 C US Banking verified 1h ago
14 apnews.com 4.9 C — stale (32d old)
15 bloomberg.com 4.9 C Global News & Media verified 7h ago
16 cloudflare.com 4.9 C — verified 3h ago
17 economist.com 4.8 C Global News & Media stale (2d old)
18 censys.io 4.8 C — verified 3h ago
19 npr.org 3.4 B Global News & Media verified 19h ago
20 wsj.com 3.0 B Global News & Media verified 5h ago

Don't want to be here?

Run the same scan we use for this ranking. See your specific findings, get the migration steps, and track the domain so you know when your score improves.

Updated nightly via Certificate Transparency log mining + active TLS probes. Public-surface measurements only — internal Blast Radius is typically 12–40× this score.
Methodology · Challenge a score · All sector leaderboards

Other watchlists