domain-intel

Passive domain reconnaissance extracts subdomains, SSL certificates, WHOIS data, and DNS records using only Python standard library modules. It queries Certificate Transparency logs and DNS-over-HTTPS without requiring API keys or installing external dependencies.

Yes, SSL certificate inspection checks expiry dates, issuer information, and Subject Alternative Names using Python stdlib. It directly connects to the target domain to extract validity periods and certificate details without requiring third-party libraries.

Bulk domain analysis gathers DNS records like A, AAAA, MX, NS, TXT, and CNAME alongside subdomains across multiple targets. It uses DNS-over-HTTPS and system DNS queries to screen the security posture of many domains simultaneously.

No, retrieving WHOIS data and DNS records requires zero API keys. The analysis uses native Python stdlib modules to perform passive WHOIS lookups and DNS queries, returning all infrastructure monitoring results as JSON output.

Certificate Transparency log querying discovers subdomains by passively searching public CT logs for SSL certificates issued to a target domain. This approach surfaces registered subdomains without actively scanning the target infrastructure.

Checking domain availability via passive DNS, WHOIS, and SSL indicators provides signals rather than definitive registration status. It infers availability from the absence of DNS records, WHOIS registrations, and SSL certificates without querying active domain registries.