domain-intel

Identify subdomains and inspect SSL, WHOIS, and DNS records using Python stdlib.

13|3|Updated May 12, 2026
One-click install
npx skills add https://github.com/kevinnft/ai-agent-skills --skill domain-intel-kevinnft
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/kevinnft/ai-agent-skills/tree/main/skills/domain/domain-intel
Command: npx skills add https://github.com/kevinnft/ai-agent-skills --skill domain-intel-kevinnft

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Passive domain intelligence using only Python stdlib and public data sources. Zero dependencies. Zero API keys. Works out of the box.

Core Features & Use Cases

  • Subdomain discovery via crt.sh certificate transparency logs
  • Live SSL/TLS certificate inspection (expiry, cipher, SANs, TLS version)
  • WHOIS lookup — supports 100+ TLDs via direct TCP queries
  • DNS records: A, AAAA, MX, NS, TXT, CNAME
  • Domain availability check (DNS + WHOIS + SSL signals)
  • Bulk multi-domain analysis in parallel (up to 20 domains)

Quick Start

Provide a list of domains to scan and the skill will enumerate subdomains, inspect SSL certificates, perform WHOIS lookups, and gather DNS records.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I discover subdomains and check SSL certificate details without using external APIs?

Subdomain discovery and SSL certificate inspection can be performed using only Python stdlib and public data sources like certificate transparency logs. This approach requires zero external APIs or keys, directly querying public infrastructure to enumerate subdomains and inspect TLS versions, ciphers, and expiry dates.

Can I perform bulk WHOIS lookups and DNS record checks across multiple domains?

Bulk WHOIS lookups and DNS record checks support parallel analysis of up to 20 domains simultaneously. The process queries DNS for A, AAAA, MX, NS, TXT, and CNAME records while performing direct TCP WHOIS queries across 100+ TLDs for batch domain monitoring.

What is passive domain intelligence and how does certificate transparency subdomain discovery work?

Passive domain intelligence gathers security information from public data sources without actively scanning the target. Certificate transparency subdomain discovery works by querying public logs like crt.sh to find historical SSL certificates, revealing associated subdomains without direct interaction with the target domain.

Do I need any API keys or external dependencies to run domain security audits?

Domain security audits can be executed without any API keys or external dependencies. The process relies entirely on the Python standard library, utilizing standard TCP and HTTP connections to query public data sources for WHOIS, SSL, and DNS information out of the box.

What's the best way to check domain availability using DNS, WHOIS, and SSL signals?

Domain availability is checked by combining DNS resolution, WHOIS registry data, and SSL certificate signals. This method aggregates multiple public data sources to determine if a domain is registered, has active DNS records, and presents a valid SSL certificate.