wouldn't certificate transparency logs be a good way to collect most active domains?