domain-intel

Gather passive domain intelligence using only Python stdlib.

97|8|Updated Mar 20, 2026

Search Tags:#dns #ssl #osint #json-output #whois #subdomains #domain-intel

Ready to run

npx skills add https://github.com/peteromallet/megaplan --skill domain-intel-peteromallet

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/peteromallet/megaplan/tree/main/megaplan/agent/skills/research/domain-intel
Command: npx skills add https://github.com/peteromallet/megaplan --skill domain-intel-peteromallet

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain reconnaissance without API keys; gathers subdomains, SSL info, WHOIS, DNS, and availability signals using only Python stdlib.

Core Features & Use Cases

Subdomain discovery via Certificate Transparency logs
SSL certificate inspection (expiry, cipher, SANs, issuer)
WHOIS lookup and registrar info
DNS record retrieval (A/AAAA/MX/NS/TXT/CNAME)
Bulk analysis of multiple domains with parallel checks
Output in structured JSON for easy automation

Quick Start

Run the domain_intel.py CLI on a domain to obtain a JSON report.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform passive domain reconnaissance without using external APIs?▼

You can perform passive domain reconnaissance using only the Python standard library to gather subdomains, SSL certificates, WHOIS, and DNS records without requiring external API keys.

How do I find subdomains using Certificate Transparency logs?▼

Subdomain discovery via Certificate Transparency logs involves querying log entries to map SSL certificate issuance history, revealing hidden subdomains without active network scanning.

Can I retrieve DNS records and inspect SSL certificates with just Python stdlib?▼

Yes, you can retrieve DNS records like A, AAAA, MX, NS, TXT, and CNAME, and inspect SSL certificate details such as expiry, SANs, and issuer using only built-in Python libraries.

What is the best way to run bulk WHOIS and DNS analysis for multiple domains?▼

The best way to run bulk domain analysis is using a single CLI that executes parallel checks across multiple domains, outputting all WHOIS and DNS results in structured JSON format.

Does passive OSINT domain intelligence work for security analysis and brand protection?▼

Yes, passive OSINT domain intelligence applies directly to security analysis, brand protection, and infrastructure monitoring by safely gathering availability signals and registrar info.

Do I need to install API dependencies to get JSON output for domain infrastructure monitoring?▼

No, you do not need to install API dependencies to get JSON output; the tool utilizes the Python standard library to provide structured JSON reports for infrastructure monitoring.