domain-intel

Domain intelligence gathering without external APIs is achievable using Python's standard library to fetch WHOIS data, DNS records, and SSL certificates. This approach queries Certificate Transparency logs and applies DNS-over-HTTPS fallbacks to return structured JSON results.

Passive OSINT subdomain discovery identifies subdomains without actively scanning the target by querying Certificate Transparency logs. It uses Python's built-in JSON handling to parse log entries, extracting subdomains safely and deterministically without sending direct probe traffic to the target.

Bulk domain analysis for DNS and SSL certificate checks is supported using a pure-Python CLI script. It executes parallel queries across multiple domains, aggregating subdomains, TLS data, and WHOIS information into a single structured JSON payload for downstream processing.

No dependencies are required to perform WHOIS lookups and DNS resolution. The tool operates entirely on Python's standard library, requiring no external API keys or third-party packages, ensuring deterministic, dependency-free results across any environment.

You can resolve A, AAAA, MX, NS, TXT, and CNAME DNS record types using the dependency-free Python script. It performs standard resolution with a DNS-over-HTTPS fallback mechanism to ensure reliable retrieval of domain records within a structured JSON output.

Passive domain reconnaissance should not be used when you need real-time active scanning or guaranteed port discovery. Availability signals are inferred passively from DNS, WHOIS, and TLS reachability data, which may not reflect transient network outages or active firewall blocks.