skills.rest
ever-oli
ever-oliCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

domain-intel

Collect passive domain intelligence via subdomains, SSL, WHOIS, DNS, and availability.

3|Updated Mar 20, 2026
Search Tags:#dns#ssl#osint#whois#domain-intelligence#subdomains
One-click install
npx skills add https://github.com/ever-oli/io --skill domain-intel-ever-oli
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/ever-oli/io/tree/main/skills/research/domain-intel
Command: npx skills add https://github.com/ever-oli/io --skill domain-intel-ever-oli

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain intelligence gathering using only Python's stdlib, enabling offline OSINT without external dependencies.

Core Features & Use Cases

  • Subdomain discovery via Certificate Transparency data
  • SSL certificate inspection (expiry, issuer, SANs)
  • WHOIS lookups (registrar, dates, nameservers)
  • DNS records resolution (A/AAAA/MX/NS/TXT/CNAME)
  • Domain availability signals via DNS + WHOIS + SSL
  • Bulk analysis across multiple domains

Quick Start

Run the CLI to analyze a domain, for example: python3 SKILL_DIR/scripts/domain_intel.py subdomains example.com.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I gather passive domain intelligence without installing external Python packages?▼

Passive domain intelligence can be collected using only Python's standard library. This approach queries subdomains, SSL certificates, WHOIS data, and DNS records offline without requiring external dependencies.

Can I resolve DNS records like A, MX, and TXT using Python stdlib?▼

Yes, DNS records including A, AAAA, MX, NS, TXT, and CNAME can be resolved. The tool operates entirely with Python stdlib to fetch and return these records as structured JSON data.

How do I find subdomains using Certificate Transparency logs?▼

Subdomain discovery is performed by querying Certificate Transparency data. This passive OSINT technique maps subdomains for a target domain and returns the results in structured JSON format.

What is the best way to check domain availability across multiple domains?▼

Domain availability signals can be checked by combining DNS, WHOIS, and SSL certificate data. You can run bulk analysis across multiple domains simultaneously to determine their registration status.

How does SSL certificate inspection work for retrieving expiry and issuer details?▼

SSL certificate inspection extracts expiry dates, issuer information, and Subject Alternative Names (SANs). This passive collection method requires only Python stdlib to gather and structure the certificate data.

Do I need any special dependencies to perform WHOIS lookups and subdomain discovery?▼

No special dependencies are needed. WHOIS lookups, subdomain discovery, and all other domain intelligence tasks run entirely on Python's built-in standard library, returning structured JSON output.

Related Skills

Explore More Data & Analytics Skills→
aayushsoamaayushsoam
1

domain-intel

Perform passive domain reconnaissance using Python stdlib without API keys.

Community
Intermediate
PlaidmustachePlaidmustache

domain-intel

Collect subdomains, SSL details, WHOIS data, and DNS records as structured JSON.

Community
Intermediate
narlyseorgnarlyseorg
6

recon-and-enumeration

Automate reconnaissance and enumeration of endpoints, services, and technologies.

Community
Advanced
nadicodeainadicodeai

domain-intel

Collect subdomains, SSL certificates, WHOIS, and DNS records via passive OSINT.

Official
Intermediate