Contents

---
tags:
  - Artifact:IP
  - Passive DNS
  - Passive SSL
---

# CIRCL Passive DNS/SSL

- [https://www.circl.lu/services/passive-dns/](https://www.circl.lu/services/passive-dns/)
- [https://www.circl.lu/services/passive-ssl/](https://www.circl.lu/services/passive-ssl/)

This analyzer uses CIRCL passive DNS API or passive SSL API:

- Use passive DNS API if a query(input) is a domain
- Use passive SSL API if a query(input) is a SHA1 certificate fingerprint

```yaml
analyzer: circl
query: ...
password: ...
username: ...
```

## Components

### Query

`query` (`string`) is a domain or SHA1 certificate fingerprint.

### Username

`username` (`string`) is a username. Optional. Defaults to `ENV[”CIRCL_PASSIVE_USERNAME”]`.

### Password

`password` (`string`) is a password. Optional. Defaults to `ENV[”CIRCL_PASSIVE_PASSWORD”]`.

Version data entries

3 entries across 3 versions & 1 rubygems

Version	Path
mihari-5.7.0	docs/analyzers/circl.md
mihari-5.6.2	docs/analyzers/circl.md
mihari-5.6.1	docs/analyzers/circl.md