Somebody could try to build own crawler and feed them with 260MM domain names dataset from https://domains-index.com
You could implement your own log monitor or use services like crt.sh or certstream to build a candidate list of domains that have registered SSL certs.