domain-intel

Collect subdomains, SSL data, WHOIS, DNS records, and availability via Python stdlib.

Updated Aug 23, 2026

Search Tags:#dns #ssl #osint #whois #subdomains #domain-intel

Ready to run

npx skills add https://github.com/wwwillott/jobnimbus --skill domain-intel-wwwillott

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: domain-intel
Source: https://github.com/wwwillott/jobnimbus/tree/main/optional-skills/research/domain-intel
Command: npx skills add https://github.com/wwwillott/jobnimbus --skill domain-intel-wwwillott

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Passive domain intelligence gathering requires multiple tools and API access; this skill provides a lightweight, dependency-free approach to gather essential domain signals from public sources.

Core Features & Use Cases

Subdomain discovery via Certificate Transparency logs
SSL certificate inspection (expiry, issuer, SANs)
WHOIS lookup and domain metadata
DNS records resolution (A/AAAA/MX/NS/TXT/CNAME)
Bulk analysis across multiple domains for rapid triage
Output is structured JSON for easy integration

Quick Start

Run python3 optional-skills/research/domain-intel/scripts/domain_intel.py subdomains example.com

Frequently Asked Questions about domain-intel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I gather passive domain intelligence without installing external dependencies?▼

Passive domain intelligence gathering can be performed using only the Python standard library to collect subdomains, SSL cert data, WHOIS, and DNS records without requiring any API keys or external dependencies.

Can I run bulk DNS and WHOIS lookups across multiple domains at once?▼

Bulk DNS and WHOIS lookups are supported across multiple domains for rapid triage, outputting structured JSON results that consolidate domain availability signals and metadata for incident response.

How do I find subdomains using Certificate Transparency logs?▼

Subdomain discovery queries Certificate Transparency logs passively via the Python stdlib, extracting and returning identified subdomains in a structured JSON format for security research.

What's the best way to check SSL certificate expiry and issuer details from the command line?▼

SSL certificate inspection retrieves expiry dates, issuer information, and Subject Alternative Names (SANs) directly through a stdlib-based Python script, outputting the details as structured JSON.

Do I need API keys to resolve A, AAAA, MX, NS, and TXT DNS records?▼

No API keys are needed to resolve A, AAAA, MX, NS, TXT, and CNAME DNS records, as the domain intelligence script operates entirely using Python's built-in standard library.

Are there limitations to dependency-free OSINT domain analysis?▼

Dependency-free OSINT domain analysis relies entirely on passive public sources and the Python stdlib, meaning it does not perform active scanning or exploit third-party API rate limits for deeper data.