v2.0.0 - Historical DNS Lookup & Port Scanning

Origin IP Resolver v2.0.0

Major update adding two powerful OSINT techniques for origin IP discovery.

New Features

Historical DNS Lookup

Queries passive DNS databases (AlienVault OTX, RapidDNS, HackerTarget) to find IPs the domain resolved to before the CDN was added. This is the single most effective technique for origin discovery — old DNS records often remain in passive DNS databases years after a site moves behind Cloudflare, Fastly, etc.

Port Scanning

Concurrent TCP connect scanner (~270 common ports) that runs on every discovered non-CDN IP. Identifies exposed services (SSH, MySQL, Redis, RDP, admin panels) with banner grabbing for service fingerprinting.

New CLI Flags

• --no-historical — Skip historical DNS lookup
• --no-portscan — Skip port scanning
• --ports 22,80,443,8000-8100 — Custom port list or range

Improvements

• Clean stdout/stderr separation for piping JSON output
• Updated JSON output includes historical_dns_records and port_scan fields
• Deduplicated historical records by IP in display output

Usage

python main.py example.com
python main.py example.com --no-historical
python main.py example.com --ports 22,80,443
python main.py example.com --json -o results.json