Contents

---
tags:
  - IP address
  - Passive DNS
  - Passive SSL
---

# CIRCL Passive DNS/SSL

- [https://www.circl.lu/services/passive-dns/](https://www.circl.lu/services/passive-dns/)
- [https://www.circl.lu/services/passive-ssl/](https://www.circl.lu/services/passive-ssl/)

This analyzer uses CIRCL passive DNS API or passive SSL API:

- Use passive DNS API if a query(input) is a domain
- Use passive SSL API if a query(input) is a SHA1 certificate fingerprint

```yaml
analyzer: circl
query: ...
password: ...
username: ...
```

| Name     | Type   | Required? | Default                       | Desc.                                  |
| -------- | ------ | --------- | ----------------------------- | -------------------------------------- |
| query    | String | Yes       |                               | Domain or SHA1 certificate fingerprint |
| username | String | No        | ENV[”CIRCL_PASSIVE_USERNAME”] | Username                               |
| password | String | Noe       | ENV[”CIRCL_PASSIVE_PASSWORD”] | Password                               |

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
mihari-5.4.5	docs/analyzers/circl.md