Which of the following would be BEST for performing passive reconnaissance on a target's external domain?

Peach is a fuzzing framework used for active testing of protocols and file formats, not for passive external reconnaissance.

CeWL is a custom wordlist generator that actively spiders a target website to harvest words, which involves direct interaction with the target and is not passive.

OpenVAS is an active vulnerability scanner that probes target systems directly with network traffic, which is the opposite of passive reconnaissance.

Shodan is a search engine that aggregates publicly available data about IP addresses, open ports, banners, and services across the internet. It allows security professionals to gather intelligence on a target's external infrastructure without sending any packets directly to the target, making it a purely passive reconnaissance tool ideal for external domain analysis.