domain-intel

Passive domain intelligence gathering uses Python's standard library to surface subdomains, SSL certificates, WHOIS data, and DNS records without external dependencies. It outputs structured JSON suitable for security and infrastructure automation workflows.

Subdomain discovery via Certificate Transparency logs is supported using Python's standard library. This passive approach surfaces subdomains without sending direct queries to the target domain, making it suitable for non-intrusive research workflows.

SSL certificate inspection extracts expiry dates, issuer details, and Subject Alternative Names (SANs) using native Python modules. It supports bulk multi-domain analysis across common TLDs to provide comprehensive certificate monitoring.

DNS record resolution covers A, AAAA, MX, NS, TXT, and CNAME records using only Python's standard library. It provides structured JSON output for infrastructure analysis and security workflows without requiring third-party DNS libraries.

Bulk WHOIS lookups are supported across multiple domains and common TLDs using stdlib tools. It retrieves registration data and outputs structured JSON, enabling automated domain availability checks and multi-domain research workflows.

Using Python's standard library for OSINT domain reconnaissance means zero external dependencies but relies on passive data sources like Certificate Transparency logs and standard DNS resolution. It does not perform active scanning, port enumeration, or direct vulnerability probing.