skills.rest
hoanghn61
hoanghn61COMMUNITY
Explore all skills by this author →
GitHub

dns-intelligence

Extract technology signals from DNS records into structured JSON summaries.

Updated May 27, 2026
Search Tags:#service discovery#dig#technology detection#dns intelligence#mx records#txt verification#cname cdn
One-click install
npx skills add https://github.com/hoanghn61/.agents --skill dns-intelligence
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dns-intelligence
Source: https://github.com/hoanghn61/.agents/tree/main/skills/techstack-identification/dns_intelligence
Command: npx skills add https://github.com/hoanghn61/.agents --skill dns-intelligence

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It reduces the time and uncertainty of identifying third-party services used by a domain by turning DNS lookups into structured technology signals.

Core Features & Use Cases

  • Email provider detection (MX): Infers likely email platforms (e.g., Google Workspace, Microsoft 365) from MX host patterns for security reviews and vendor discovery.
  • Service verification token discovery (TXT): Detects verification markers (e.g., SPF/DMARC/DKIM, common SaaS token prefixes) to understand integrations and governance controls.
  • Infrastructure and delegation signals (NS, CNAME, SRV): Maps DNS hosting providers (NS), CDN/hosting/PaaS delegation (CNAME), and enterprise service presence (SRV) for threat modeling and tech stack profiling.
  • Example use case: A company security analyst can run DNS intelligence on a customer domain to quickly summarize email, CDN/hosting, and collaboration/service signals with confidence scores.

Quick Start

Ask the AI to run dns-intelligence for the domain example.com and return a JSON summary with detected email provider, DNS provider, CDN/hosting indicators, third-party services, and evidence of DNS responses.

Frequently Asked Questions about dns-intelligence

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect third-party SaaS providers and email infrastructure from DNS records?▼

DNS intelligence extracts technology signals from MX, TXT, NS, CNAME, and SRV lookups to identify likely SaaS providers, email platforms, and enterprise services. It uses pattern-based detection mappings with confidence scoring to output structured JSON evidence.

Can I identify a domain's email provider using MX records?▼

Yes, you can identify a domain's email provider by analyzing MX host patterns. DNS intelligence infers likely email platforms such as Google Workspace or Microsoft 365 from these records for security reviews and vendor discovery.

What is the best way to discover CDN and hosting delegations for a domain?▼

The best way to discover CDN and hosting delegations is by querying CNAME and NS records. DNS intelligence maps these DNS hosting providers and delegation signals to perform tech stack profiling and threat modeling.

Does DNS service discovery require any specific tools or dependencies?▼

DNS service discovery requires DNS querying via the dig command. It operates with pattern-based detection mappings and confidence scoring to produce structured JSON outputs without additional dependencies.

How do I find SaaS verification tokens in TXT records?▼

You can find SaaS verification tokens in TXT records by detecting common SaaS token prefixes and email governance markers like SPF, DMARC, and DKIM. This helps understand third-party integrations and governance controls.

Why should I use DNS records for technology detection instead of other reconnaissance methods?▼

Using DNS records for technology detection reduces the time and uncertainty of identifying third-party services. It turns standard DNS lookups into structured technology signals with confidence scores, making it fast and reliable for security assessments.

Related Skills

Explore More Data & Analytics Skills→
openeuler-mirroropeneuler-mirror
3

dns-resolution-diagnosis

Diagnoses Linux DNS resolution failures using dig, resolvectl, and tcpdump.

Official
Advanced
0x0pointer0x0pointer
99

threat-modeling

Model security threats with PASTA and Shostack methods, producing Mermaid diagrams and risk registers.

Official
Advanced
zangjeicyzangjeicy

domain-intel

Perform passive domain reconnaissance and DNS record resolution using Python standard libraries.

Community
Intermediate
AeonDaveAeonDave
15

subfinder

Enumerate subdomains for a target domain using passive OSINT sources.

Community
Intermediate