whois-dns-recon

Original：🇺🇸 English

Translated

Look up domain registration and DNS records. Use when running WHOIS/RDAP, querying DNS records (A, MX, TXT, NS, SPF, DKIM, DMARC), finding a domain's registrant, nameservers, or mail setup, or resolving IPs and ASNs.

599installs

Sourceuseosint/osint-skills

Added on2026-08-02

NPX Install

npx skill4agent add useosint/osint-skills whois-dns-recon

SKILL.md Content

View Translation Comparison →

WHOIS & DNS Recon

Registration and DNS records reveal ownership, infrastructure, and mail security posture — all passive.

WHOIS / RDAP

bash

whois example.com          # registrar, dates, nameservers, registrant

RDAP is the structured successor — query

https://rdap.org/domain/example.com

. Registrant details are often GDPR-redacted; the registrar, creation date, and nameservers still pivot well. Historical WHOIS (WhoisXML, SecurityTrails) can show pre-redaction owners and registrant email — feed those to

email-osint

.

DNS records