skills.rest
jacardl
jacardlCOMMUNITY
Explore all skills by this author →
GitHub

domain-intel

Enumerate subdomains, inspect SSL certificates, perform WHOIS lookups, and resolve DNS records using Python stdlib.

Updated Apr 16, 2026
Search Tags:#dns#ssl#osint#whois#subdomains#bulk-analysis#domain-intel
One-click install
npx skills add https://github.com/jacardl/New-Radar --skill domain-intel-jacardl
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/jacardl/New-Radar/tree/main/backend/frameworks/hermes-agent/optional-skills/research/domain-intel
Command: npx skills add https://github.com/jacardl/New-Radar --skill domain-intel-jacardl

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain intelligence gathering without external APIs or API keys, enabling safe OSINT using only Python stdlib.

Core Features & Use Cases

  • Subdomain discovery from Certificate Transparency logs
  • SSL certificate inspection (expiry, issuer, SANs)
  • WHOIS lookup for registrar, dates, and status
  • DNS records resolution (A/AAAA/MX/NS/TXT/CNAME) via system DNS and DoH
  • Bulk domain analysis with parallel execution for multiple targets

Quick Start

Run the domain_intel.py CLI to perform subdomain, ssl, whois, dns, available, and bulk checks on your target domains.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I gather passive domain OSINT without using external APIs?▼

Subdomain discovery works by querying Certificate Transparency logs, which record SSL certificates issued for a domain, revealing associated subdomains without needing API keys or active network scanning.

Can I perform bulk DNS and WHOIS lookups for multiple domains at once?▼

Yes, bulk domain analysis supports multiple targets through parallel execution, allowing you to simultaneously resolve DNS records and perform WHOIS lookups for numerous domains efficiently.

Do I need any API keys to inspect SSL certificates and resolve DNS records?▼

No API keys are required to inspect SSL certificates or resolve DNS records; the tool operates entirely using Python's standard library and system DNS or DNS over HTTPS.

What is the best way to automate subdomain discovery and SSL inspection for security research?▼

The best way to automate subdomain discovery and SSL inspection is running the CLI tool, which outputs structured JSON containing expiry dates, issuers, and SANs for seamless integration into security pipelines.

Does this passive domain intelligence tool work without installing third-party dependencies?▼

Yes, the tool works without third-party dependencies because it is built exclusively on Python's standard library, requiring no additional package installations to perform WHOIS, DNS, and SSL checks.

Related Skills

Explore More Data & Analytics Skills→
nadicodeainadicodeai

domain-intel

Collect subdomains, SSL certificates, WHOIS, and DNS records via passive OSINT.

Official
Intermediate
ever-oliever-oli
3

domain-intel

Collect passive domain intelligence via subdomains, SSL, WHOIS, DNS, and availability.

Community
Intermediate
macaughmacaugh
5

Service Fingerprinting

Detect network services and versions on discovered hosts via active probing.

Community
Advanced
aviskaaraviskaar
6

threat-hunter

Conduct proactive threat hunting campaigns using MITRE ATT&CK frameworks.

Official
Advanced