recon_domain
Get a passive overview of a domain in one call, covering WHOIS, DNS, email security, TLS, HTTP headers, CT-log subdomains, and ASN/IP intel, then review key highlights.
Instructions
Passive overview of a domain in one call: whois, DNS, email security grade, TLS certificate, HTTP security headers, subdomains from CT logs, and ASN / reverse DNS / Shodan InternetDB for its first few IPs. Ends with a 'highlights' list of things worth a look. Takes 10-60s, mostly waiting on crt.sh, pass include_subdomains=false for a faster run.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | ||
| include_subdomains | No |