skills.rest
peteromallet
peteromalletCOMMUNITY
Explore all skills by this author →
𝕏@peteromalletGitHub

domain-intel

Gather passive domain intelligence using only Python stdlib.

97|8|Updated Mar 20, 2026
Search Tags:#dns#ssl#osint#json-output#whois#subdomains#domain-intel
One-click install
npx skills add https://github.com/peteromallet/megaplan --skill domain-intel-peteromallet
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/peteromallet/megaplan/tree/main/megaplan/agent/skills/research/domain-intel
Command: npx skills add https://github.com/peteromallet/megaplan --skill domain-intel-peteromallet

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain reconnaissance without API keys; gathers subdomains, SSL info, WHOIS, DNS, and availability signals using only Python stdlib.

Core Features & Use Cases

  • Subdomain discovery via Certificate Transparency logs
  • SSL certificate inspection (expiry, cipher, SANs, issuer)
  • WHOIS lookup and registrar info
  • DNS record retrieval (A/AAAA/MX/NS/TXT/CNAME)
  • Bulk analysis of multiple domains with parallel checks
  • Output in structured JSON for easy automation

Quick Start

Run the domain_intel.py CLI on a domain to obtain a JSON report.

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform passive domain reconnaissance without using external APIs?▼

You can perform passive domain reconnaissance using only the Python standard library to gather subdomains, SSL certificates, WHOIS, and DNS records without requiring external API keys.

How do I find subdomains using Certificate Transparency logs?▼

Subdomain discovery via Certificate Transparency logs involves querying log entries to map SSL certificate issuance history, revealing hidden subdomains without active network scanning.

Can I retrieve DNS records and inspect SSL certificates with just Python stdlib?▼

Yes, you can retrieve DNS records like A, AAAA, MX, NS, TXT, and CNAME, and inspect SSL certificate details such as expiry, SANs, and issuer using only built-in Python libraries.

What is the best way to run bulk WHOIS and DNS analysis for multiple domains?▼

The best way to run bulk domain analysis is using a single CLI that executes parallel checks across multiple domains, outputting all WHOIS and DNS results in structured JSON format.

Does passive OSINT domain intelligence work for security analysis and brand protection?▼

Yes, passive OSINT domain intelligence applies directly to security analysis, brand protection, and infrastructure monitoring by safely gathering availability signals and registrar info.

Do I need to install API dependencies to get JSON output for domain infrastructure monitoring?▼

No, you do not need to install API dependencies to get JSON output; the tool utilizes the Python standard library to provide structured JSON reports for infrastructure monitoring.

Related Skills

Explore More Data & Analytics Skills→
trpc-grouptrpc-group
1.6k

python-math

Run Python utilities for math and text-file tasks via CLI arguments.

Official
Intermediate
PlaidmustachePlaidmustache

domain-intel

Collect subdomains, SSL details, WHOIS data, and DNS records as structured JSON.

Community
Intermediate
Steffen025Steffen025
186

Recon

Automate passive and authorized active infrastructure reconnaissance across domains, IPs, netblocks, and ASNs.

Community
Advanced
luisgustavooliveiraluisgustavooliveira

Recon

Perform passive and active infrastructure reconnaissance using DNS, WHOIS, and IPInfo.

Community
Advanced