What exactly is a "new subdomain" signal?

Every website that serves HTTPS issues a public certificate, and every certificate is recorded in the public transparency log. A subdomain whose certificate first appears inside your window is new public surface: a new product, region, portal or integration. The tool returns them newest first with their first-observed date — and says plainly that the date is an observation, not the exact deploy time.

Is the stack fingerprint a fact about the company?

No — it is a labelled heuristic. The engine matches the domain's own published DNS records (CNAME, MX, TXT) against known provider patterns, so each detection means "very likely this provider", never "confirmed". Use it for targeting language — "you run X, we do Y" — and lean on the raw records in the result when you want to reason further.

What happens when a source is slow or rate-limited?

Certificate readings are cached for an hour, so repeating a scan minutes apart is free. When a source does not answer, the result carries an explicit "source unavailable" flag and a note to retry in a few minutes — it is never reported as "no data", because an unavailable reading and a genuine negative are different facts and mixing them up would mislead the outreach.

Tech Trigger Radar MCP Connector for Claude

A+

Keyless technical and demand signals for outbound targeting — subdomains that just appeared, the stack behind a domain, its public age, how the market phrases a need, and what is trending now. No key, no account.

6 tools Official Updated Oct 1, 2026 Official Vinkius Partner

More Details Connect to Claude

The best outbound openings are not in your CRM — they are in what targets do to their websites, products and the market's own search behavior. This MCP reads those footprints from public sources, with no key and no account anywhere in the chain.

What you can do

Catch new surface — every subdomain a domain has ever served a TLS certificate for shows up in the public certificate log. Reading the ones first seen inside your window is the "they just launched something" trigger: new product, new region, new portal.
Finger the stack — where the domain is hosted, what mail it runs, which recognizable systems it exposes, from its own published DNS records. Targeting language, not claims: every detection is labelled as a heuristic.
Measure public age — how long the domain has been publicly serving TLS. A young reading is a real "just launched" signal; the tool says plainly it is an observation, not the registration date.
Read the market's wording — what people actually type after your product phrase, in frequency order, optionally scoped to a country. That is the language to mirror in subject lines and the queries to qualify active lookers.
Watch what is trending — the live trending-searches feed for a region, plus a demand pulse that says whether commercial variants (alternatives, pricing, best-of) of your keyword are being searched at all.

How it works

The server combines the public certificate-transparency log, public DNS lookups, the public autocomplete endpoint and the public trending feed. Certificate readings are cached for an hour; when a source is slow or rate-limited the result says "source unavailable — retry in a few minutes" instead of returning a fake empty, so an unavailable reading is never mistaken for a negative signal.

Who is this for

Outbound teams and founders who need technical and demand triggers: which targets just shipped something, what they run, how the market phrases the need and what is hot right now — all from public data, no credentials.

tech-signalssubdomainsstack-fingerprintcertificate-transparencydemandtrendingoutboundgtm

6 tools expose this connector's capabilities to your AI agent.

search_suggestions

This is how the market phrases the need: the top lines are the exact search terms to use for target qualification and the wording to mirror in subject lines and ads. An empty list is a signal in itself — the phrase carries little search weight, either because the need is unfamiliar or the phrase is too generic. If the source does not answer, the result says it is unavailable rather than empty. What people actually type after a product phrase, in frequency order — the market's own wording. Keyless

subdomain_watch

A new subdomain is new surface: a new product, region, portal or integration, and the name itself ("ai-", "beta-", "api-") is the read. This is the "they just launched something" trigger for an outreach. Two caveats to carry: the dates are first observations in the public log, not exact deploy dates, and if the log is rate-limited the result says the source is unavailable and to retry in a few minutes — that answer is not the same as "no new subdomains", so do not report it that way. Subdomains of a domain whose certificates first appeared inside a window — new product surface, keyless, from the public certificate log

demand_pulse

The pulse field is the read: "active" means commercial variants are being searched, which is live buying intent to intercept; "quiet" means the commercial variants have no weight, so lead with the product phrasing instead; "partial" means some sources did not answer. Use the returned phrasings verbatim as targeting language. The phrase list for the base term tells you the shape of the need itself. How the market phrases a keyword right now, whether commercial variants are searched, and if it is trending. Keyless

domain_age

A young reading is a real "just launched" signal — a brand-new product surface is a warm target. Read it as an observation, not a fact: it is the earliest certificate in the public log, not the registration date, so a mature domain can read younger than it is. A domain with no observations is reported as such (often new or low-traffic), and a rate-limited log is reported as unavailable, never as "new". How long the domain has been publicly serving TLS — its first observed certificate, keyless

stack_fingerprint

Every detection is a pattern match on records the domain itself publishes: use it for targeting language ("you run X, we do Y"), not as a claim. An empty detection list means nothing recognizable matched, not that nothing is running; if the DNS lookups fail, the result says the source is unavailable and to retry. The raw records are included so the agent can reason over them directly. Where the domain is hosted and whose mail it runs, heuristically from public DNS records. Keyless

trending_now

A trending term adjacent to your product is a top-of-funnel window: timely content, an ad hook or a "saw this, thought of you" outreach line. Traffic is an approximation, not a count. If the feed does not answer, the result says it is unavailable, not that nothing is trending. The live trending searches for a region, with approximate traffic. Keyless