During the passive reconnaissance phase of an external penetration test, you must gather information about the target organization without generating any traffic to the client's production infrastructure. You want to identify the domain registration date, the registrar, the abuse contact email, and the authoritative name servers listed for the target domain. Which tool or technique BEST satisfies this requirement while remaining strictly passive?