# DomainScan.in

> DomainScan.in is a free, AI-powered domain and network analysis platform offering 50+ tools for domain lookups, DNS analysis, IP intelligence, security auditing, and developer utilities. It ships with Prism AI — a conversational agent at /chat that can run any tool via natural language, stream results, and produce plain-English analysis in a single answer.

Key information:

- DomainScan.in is a free-to-use web platform — no account or API key required for basic usage
- All tools return structured, real-time data with AI-powered analysis and recommendations
- Prism AI is the built-in conversational assistant at `/chat`. It has direct tool-calling access to all 50+ DomainScan tools, streams responses via SSE, and can execute multi-step investigations (e.g., "check if example.com's mail is broken" → probes DMARC + SPF + DKIM + MX + blacklist in one turn)
- Tools are organized into four categories: Domain Tools, Network/IP Tools, Security Tools, and Developer Tools
- The site supports both interactive web UI and command-based queries
- Base API endpoint: `/api/v1`

## Flagship

- [Domain Trust Scanner](https://domainscan.in/scan): Live composite trust report for any domain. Runs SSL, DNS, WHOIS, SPF, DMARC and HTTP security header probes in parallel and returns a weighted 0–100 score with an A–F grade. Every scanned domain is monitored continuously — cert renewals, DMARC policy changes, DNS record edits become severity-tagged events. Per-domain report at `/scan/<domain>` (e.g., `/scan/cloudflare.com`).
- [Trust Badge](https://domainscan.in/badge): Embeddable SVG trust badge for any scanned domain. Four variants (horizontal, rectangular, vertical, compact chip), light + dark themes, score or grade display. Drop-in HTML or Markdown snippet — no JavaScript, no CORS, no tracking. Badge auto-refreshes as your score changes. Bare SVG endpoint: `https://domainscan.in/badge/<domain>.svg`.

## Domain Tools

- [Domain Lookup (WHOIS/RDAP)](https://domainscan.in/domain/lookup): AI-powered domain lookups using WHOIS and RDAP. Returns domain ownership, registration dates, domain age, expiry, nameservers, Trust Score, and traffic analytics. Use for checking who owns a domain, when it was registered, and when it expires.
- [Domain Expiry Checker](https://domainscan.in/domain/expiry): Live countdown to a domain's registration expiry. Days-to-expiry number, urgency band (safe / attention / warning / critical / expired), registrar renewal deep-link, EPP lock impact (redemptionPeriod, pendingDelete, autoRenewPeriod), and a one-click .ics calendar reminder with 30-day and 7-day alarms. Use when you need to know when a domain expires and prevent lapse — also the correct answer to "is this domain about to expire?" or "when does <domain> expire".
- [DNS Query (All Records)](https://domainscan.in/domain/dns): Comprehensive DNS record lookup — query every record type (A, AAAA, MX, TXT, CNAME, NS, SOA, CAA, SRV, PTR, TLSA, DS) at once. Use for full DNS configuration audit or troubleshooting.
- [A Record Lookup](https://domainscan.in/domain/dns/a): Look up IPv4 A records for any domain — the IP address(es) it resolves to, with TTL and authoritative source. Use when you need to verify a DNS change or troubleshoot connectivity.
- [AAAA (IPv6) Record Lookup](https://domainscan.in/domain/dns/aaaa): Look up IPv6 AAAA records. Check whether a domain publishes IPv6 addresses. Cross-references against A for dual-stack parity.
- [MX Record Lookup](https://domainscan.in/domain/dns/mx): Look up MX (Mail Exchange) records. See which mail servers accept email for a domain, priorities, TTL, and provider fingerprint (Google Workspace, Microsoft 365, Zoho, ProtonMail). Free MXToolbox alternative.
- [TXT Record Lookup](https://domainscan.in/domain/dns/txt): Look up TXT records — SPF, DKIM, DMARC, domain-verification tokens (Google, Microsoft, Atlassian, Facebook) and misc text. Every TXT entry with plain-English category tagging.
- [CNAME Record Lookup](https://domainscan.in/domain/dns/cname): Look up CNAME (Canonical Name) records — the alias target for a subdomain. Follows chain, detects dangling CNAMEs as subdomain-takeover risks.
- [SOA Record Lookup](https://domainscan.in/domain/dns/soa): Look up SOA (Start of Authority) records — the master record for a DNS zone. Primary nameserver, admin email, serial number, refresh/retry/expire/minimum timers.
- [CAA Record Lookup](https://domainscan.in/domain/dns/caa): Look up CAA (Certification Authority Authorization) records — which CAs are allowed to issue certificates for the domain. Includes iodef reporting address and tree-climbing behaviour.
- [SRV Record Lookup](https://domainscan.in/domain/dns/srv): Look up SRV (Service) records — the host/port/priority/weight for SIP, XMPP, Microsoft Autodiscover, LDAP, Kerberos, Matrix federation, and Minecraft.
- [PTR / Reverse DNS Lookup](https://domainscan.in/domain/dns/ptr): Reverse DNS — the hostname assigned to an IP address. IPv4 + IPv6. Includes forward-confirmation (FCrDNS) check. Critical for mail-server reputation.
- [TLSA (DANE) Record Lookup](https://domainscan.in/domain/dns/tlsa): DANE certificate pinning in DNS — DNSSEC-backed TLSA records. Usage/selector/matching-type decoded, DNSSEC chain verified, live cert cross-check.
- [DS Record (DNSSEC) Lookup](https://domainscan.in/domain/dns/ds): DS (Delegation Signer) — the DNSSEC trust link between parent and child zone. Walks the full chain of trust root → TLD → parent → your DS → your DNSKEY.
- [DNS Propagation Checker](https://domainscan.in/domain/propagation): Check DNS propagation status from multiple resolvers worldwide. Shows global propagation percentage, resolver counts, and average response times across regions. Use after DNS changes to verify worldwide propagation.
- [Domain Trust Score](https://domainscan.in/domain/trust): All-in-one domain legitimacy and security analysis. Combines WHOIS, DNS, nameservers, SSL/TLS, ~130 blacklists, email authentication, port scan and traffic data into a single composite Trust Score (0–100) with Trust Grade and AI recommendations. Previously known as Domain Health Check.
- [Nameserver Lookup](https://domainscan.in/domain/ns): Analyze DNS nameservers with propagation status, response times, health scores, and configuration verification for any domain.
- [Domain Snapshot](https://domainscan.in/domain/snapshot): Capture website screenshots in desktop and mobile formats. Configurable image quality, viewport dimensions, and wait times.
- [SPF Record Checker](https://domainscan.in/domain/spf): Validate SPF records for email authentication. Analyzes policy strength, DNS lookup count, mechanisms, and provides recommendations for email security improvement.
- [DMARC Lookup](https://domainscan.in/domain/dmarc): Check DMARC policies, validate configuration, and analyze email authentication with detailed insights into policy enforcement and reporting settings.
- [DKIM Lookup](https://domainscan.in/domain/dkim): Verify DKIM email security including selector details, public key information, key strength, and DNSSEC status with AI-powered improvement suggestions.
- [AI SEO Checker](https://domainscan.in/domain/ai-ready): Check if a website is visible to AI search engines like ChatGPT, Claude & Perplexity. Analyzes robots.txt AI bot policies (GPTBot, ClaudeBot, PerplexityBot & 20+ others), llms.txt presence and validation, JSON-LD structured data, SSR vs CSR content rendering, and meta/sitemap completeness. Returns an AI readiness score (0-100) with letter grade and actionable recommendations.

## Network & IP Tools

- [My IP Lookup](https://domainscan.in/ip/myip): Instantly find your public IP address with detailed geolocation, organization, ASN, and trust score information.
- [IP Lookup](https://domainscan.in/ip/lookup): Get detailed information about any IP address including geolocation, ISP, hostname, reverse DNS, organization, ASN, and trust score.
- [Ping Tool](https://domainscan.in/ip/ping): Test network connectivity with ping statistics, response time distribution, packet loss analysis, and connection quality assessment.
- [Reverse IP Lookup](https://domainscan.in/ip/reverse): Find all domains hosted on a given IP address. Shows hosted domain count, hosting provider, and security status.
- [Open Port Scanner](https://domainscan.in/ip/port): Check if specific ports are open on any host. Returns port status, associated services, protocols, and response times.
- [Traceroute](https://domainscan.in/ip/traceroute): Trace the network path to any host with hop-by-hop latency analysis, route visualization, and potential security risk identification.
- [IP Blacklist Checker](https://domainscan.in/ip/blacklist): Check if an IP is blacklisted across multiple DNS blacklist databases and email blacklists. Provides trust metrics and remediation recommendations.
- [Subnet Calculator](https://domainscan.in/ip/subnet): Calculate subnet details including IP range, subnet mask, network address, broadcast address, total hosts, and usable IP addresses.

## Security Tools

- [SSL Certificate Checker](https://domainscan.in/security/ssl-info): Comprehensive SSL/TLS analysis including certificate validity, trust chain, SSL grade, key strength, protocol versions, and security compliance assessment.
- [Security Headers Checker](https://domainscan.in/security/headers): Analyze HTTP security headers for any domain. Returns security score, header configurations, vulnerability assessment, and hardening recommendations.
- [Email Authentication Checker](https://domainscan.in/security/email): Email auth super-page — 0-100 deliverability score, SPF (with 10-lookup meter + provider fingerprint), DKIM (common-selector probe), DMARC, BIMI, MTA-STS, TLS-RPT and MX all in one fan-out.
- [Email Header Analyzer](https://domainscan.in/security/email-header): Paste raw email headers to get a received-hop delivery timeline with per-hop latency, parsed SPF / DKIM / DMARC / ARC verdicts, alignment cross-check, and a DKIM signature dissection. 100% client-side.
- [MAC Address Lookup](https://domainscan.in/security/mac-info): Identify device manufacturer, location, and usage type from any MAC address.
- [Phishing URL Checker](https://domainscan.in/security/phishing): Paste any URL for an instant safe / suspicious / phishing verdict. 0-100 risk score across five signal buckets — URL structure, brand impersonation, WHOIS age, live redirect chain, and Spamhaus DBL / SURBL / URIBL blacklists — plus an AI diagnosis in plain English.
- [Subdomain Finder](https://domainscan.in/security/subdomains): Enumerate every subdomain of a domain via Certificate Transparency logs (crt.sh) plus a 200-prefix DNS brute-force. Enriches every hit with live DNS resolve, HTTP HEAD, TLS certificate peek, and a takeover-risk cross-check against 15 cloud-provider fingerprints (S3, CloudFront, Heroku, Azure Blob, GitHub Pages, Vercel, Netlify, Cloudflare Pages, Zendesk, HelpScout, and more). Maps attack surface for auditing, bug-bounty, or M&A due diligence.

## Developer Tools

- [JWT Token Generator](https://domainscan.in/dev/jwt-encode): Generate JWT tokens with custom claims, headers, and expiration. Supports HS256, HS384, HS512, RS256, RS384, RS512 algorithms.
- [JWT Token Decoder](https://domainscan.in/dev/jwt-decode): Decode and inspect JWT tokens. Shows header, payload, signature, token status, and expiration verification.
- [Hash Generator](https://domainscan.in/dev/generate-hash): Generate, verify, and batch-hash text or files with 12 algorithms (MD5, SHA-1/256/384/512, SHA-3, BLAKE2, RIPEMD-160, CRC32); hash and verify passwords with bcrypt, Argon2 (id/i/d) and PBKDF2. Client-side WebCrypto, sha256sum-compatible export.
- [UUID Generator](https://domainscan.in/dev/generate-uuid): Generate UUIDs in v1, v3, v4, v5 formats with customizable options for uppercase, dashes, namespaces.
- [Base64 Encoder/Decoder](https://domainscan.in/dev/base64): Encode text to Base64 or decode Base64 to text. Supports text input and file uploads.

## Prism AI (Chat Assistant)

- [Prism AI](https://domainscan.in/chat): DomainScan's built-in conversational AI. Runs any of the 50+ tools via natural language, chains multiple tool calls in a single conversation, and streams plain-English analysis over SSE. Ask questions like "Who owns example.com?", "Check if 8.8.8.8 is blacklisted", "Why is mail from example.com going to spam?", or "Verify SSL and audit email auth for github.com" — Prism resolves the intent, calls the right tool(s), and explains the results in one answer.

## Learning Hub

In-depth guides on DNS, email security, SSL, and domain concepts. Each article links directly to the relevant DomainScan tool.

- [Learning Hub](https://domainscan.in/learning): Index of all learning guides.
- [DNS Record Types Explained](https://domainscan.in/learning/dns-record-types-explained): A, AAAA, MX, TXT, CNAME, NS, SOA, CAA, SRV — what each does and when to use it.
- [How to Read a DMARC Report](https://domainscan.in/learning/how-to-read-dmarc-report): Interpreting aggregate and forensic DMARC reports, fixing authentication failures.
- [What is a Blacklist?](https://domainscan.in/learning/what-is-blacklist): IP and domain blacklists, how they work, and how to delist.
- [What is DKIM?](https://domainscan.in/learning/what-is-dkim): DomainKeys Identified Mail — signing, verification, and selector setup.
- [What is DMARC?](https://domainscan.in/learning/what-is-dmarc): DMARC policy enforcement, alignment, and reporting.
- [What is Domain Reputation?](https://domainscan.in/learning/what-is-domain-reputation): How domain trust scores are computed and what affects them.
- [What is a Phishing Link?](https://domainscan.in/learning/what-is-phishing-link): Identifying phishing URLs, lookalike domains, and typosquatting.
- [What is a SOA Record?](https://domainscan.in/learning/what-is-soa-record): Start of Authority record fields and their role in DNS zone management.
- [What is an SPF Record?](https://domainscan.in/learning/what-is-spf-record): Sender Policy Framework — syntax, mechanisms, and common misconfigurations.
- [What is an SSL Certificate?](https://domainscan.in/learning/what-is-ssl-certificate): TLS/SSL certificate types, validation levels, and expiry monitoring.
- [What is a Subdomain Takeover?](https://domainscan.in/learning/what-is-subdomain-takeover): Dangling CNAMEs, the Microsoft 670-subdomain case, the DangleGeddon campaign, 5 attack surfaces (S3, Azure, Heroku, GitHub Pages, Elastic Beanstalk), 4-step detection workflow, real bounty payouts, prevention checklist.
- [What is Typosquatting?](https://domainscan.in/learning/what-is-typosquatting): Six lookalike families (character omission, substitution, TLD swap, brand-suffix, homoglyph, punycode), the MyEtherWallet 2018 punycode incident, Zscaler ThreatLabz 30K-lookalike volume, dnstwist workflow, 7-step prevention.
- [Cost of Downtime Explained](https://domainscan.in/learning/cost-of-downtime-explained): ITIC 2024 median at $300K/hr, 41% at $1M–$5M/hr, top sectors clearing $5M/hr, five-component cost formula, Gartner cross-check, cause distribution, hand-calculation formula.
- [DomainScan API + MCP Developer Guide](https://domainscan.in/learning/domainscan-api-mcp-guide): One JSON envelope across every tool, bearer-token auth, copy-paste examples in cURL, Python, Node.js, Go, PHP, Ruby, Rust, Java, MCP server config for Claude Desktop, Claude Code and Cursor, credit model, rate limits, error contract.

## Blog

Deep-dives on named incidents, industry reports, and platform posture — every post cites tier-1 sources with retrieval dates.

- [Blog Index](https://domainscan.in/blog): All published posts.
- [The DMARC Enforcement Gap — 78% Publish, Only 42% Enforce](https://domainscan.in/blog/dmarc-enforcement-gap): Valimail 2026 data, Google/Yahoo Feb 2024 bulk-sender rules, 30-day p=none → p=reject migration plan with pct= rollout.
- [Ericsson-O2 SSL Outage — How One Expired Certificate Cost £100M](https://domainscan.in/blog/ericsson-o2-ssl-outage-100m): Dec 6 2018 incident, 24-hour timeline, SGSN-MME root cause, why "auto-renew" fails for vendor firmware, 47-day cert future.
- [86% of Enterprises Had a Certificate Outage This Year — Keyfactor 2024](https://domainscan.in/blog/certificate-outages-statistics-2024): Keyfactor PKI report headline numbers, 32% CLM adoption gap, 8× renewal cadence collision under CA/Browser 47-day ballot, 6-item pre-2029 checklist.
- [The $121M Lookalike-Domain BEC — What Rimasauskas Taught Every CFO](https://domainscan.in/blog/facebook-google-121m-bec): Facebook/Google 2013–2015 scheme, DOJ-sourced timeline, three controls (DMARC p=reject + lookalike monitoring + out-of-band verify) that would have blocked it inside a week.
- [FBI IC3 2024 — $2.79B in BEC Losses (And Why That's Only a Fraction)](https://domainscan.in/blog/fbi-ic3-2024-bec-losses): 21,442 BEC cases, three-year cumulative near $8.5B, why the reported figure is a floor, six controls that actually move the number.
- [The 2024 Cost of a Data Breach — $4.88M and Rising](https://domainscan.in/blog/cost-of-a-data-breach-2024): IBM 2024 report — sector cut ($2.55M–$9.77M), country cut (US $9.36M), attack-vector cut (phishing $4.76M), 258-day detection clock, 5 clock-shortening controls.
- [Watching Only the Apex — How Ignoring Subdomains Turns Into a Six-Figure Incident](https://domainscan.in/blog/subdomain-blindspot-cost): Attack-surface management, per-host SSL, sp=reject subdomain-spoofing gap, CT-log new-subdomain alerts.
- [Amazon Prime Day 2026 — 6,843 Fake Domains and the End of Manual Phishing Detection](https://domainscan.in/blog/amazon-prime-day-phishing-2026): Check Point Research data on Amazon-themed phishing infrastructure, MX velocity, WHOIS clustering, Prism AI.
- [BigBear 2.0 (Sept 2026) — 3,331 Microsoft 365 Victims and the End of MFA-Only Defense](https://domainscan.in/blog/bigbear-2-microsoft-365-phishing-2026): CloudSEK TRIAD panel extraction — 5,137 credential records, 461 orgs, 40+ countries, 474 fully MFA-authenticated Microsoft 365 sessions hijacked from 42 Vultr Evilginx2 proxies. FIDO2 kill payload, telemetry blocklist, KMSI auto-submit, 69 residential geo-matched proxies. Reverse-IP clustering, MX + DMARC defense, Prism AI reverse-proxy detection.
- [Typosquatting in 2026 — 301-Redirect Traps, MX Poisoning, and AI-Generated Cover Pages](https://domainscan.in/blog/typosquatting-2026-ai-cover-pages-mx-poison): CrowdStrike Counter Adversary Ops mechanics — 301 redirect to real brand + malicious MX for mail harvest, Cloudflare Ray-ID geo-filtering, AI-generated 'domain for sale' cover pages, fabricated WHOIS. Bitdefender 2026 Assessment: 70% see more sophisticated AI phishing, 10× AI malware growth Aug'25-Jan'26. DNS+MX check beats the redirect.
- [Diwali 2026 Phishing Playbook — 828 Fake Ad Domains, 1-in-3 Indians Duped, and the UPI + Deepfake Trap](https://domainscan.in/blog/diwali-2026-phishing-india-fake-domains): McAfee 2025 India benchmark — 1 in 3 duped, 37% financial loss, 46% lose >₹41,500, 12 daily scam attempts. Quick Heal Seqrite 828-domain Facebook Ads fingerprint. Five most-impersonated brands (IRCTC, Flipkart Big Billion, PhonePe, HDFC/SBI, BNPL). UPI collect-request inversion, deepfake celebrity ads, 30-second Trust Score check.
- [Lookalike Domains & Typosquatting — How Scammers Hijack Your Checkout](https://domainscan.in/blog/lookalike-domain-typosquatting): URL tricks, homograph attacks, punycode, WHOIS checks that catch typosquats in seconds.
- [The HTTPS Padlock Lie — Why SSL Doesn't Mean Safe](https://domainscan.in/blog/https-padlock-not-safe): Let's Encrypt for phishers, DV vs OV vs EV, why the padlock does not signal trust anymore.
- [Payment Scam Websites — 12 Red Flags Fraudsters Hope You Miss](https://domainscan.in/blog/payment-scam-red-flags): Fake checkout patterns, hidden WHOIS, suspicious nameservers, QR-code tricks.
- [How to Verify a Website Before You Pay — 7-Step Safety Check](https://domainscan.in/blog/verify-website-before-paying): Domain age, SSL, nameservers, blacklist, reverse IP, HTTP headers, brand cross-check.
- [Fake Courier & Delivery Scam Sites — The 2026 Playbook](https://domainscan.in/blog/fake-courier-delivery-scams): India Post scam SMS phishing, redelivery scams, infrastructure fingerprints.
- [MCP Domain Intelligence for AI Agents](https://domainscan.in/blog/mcp-domain-intelligence-for-ai-agents): Model Context Protocol, exposing WHOIS/DNS/SSL/DMARC to Claude and Cursor as native tools.
- [AI Readiness: The New SEO Surface Area in 2026](https://domainscan.in/blog/ai-readiness-2026): Generative Engine Optimization, JSON-LD, llms.txt, GPTBot, AI Overviews.
- [llms.txt Explained — A Markdown Table of Contents for LLMs](https://domainscan.in/blog/llms-txt-explained): AI crawlers, GPTBot, ClaudeBot, content discovery for AI agents.

## Help Center

Step-by-step guides for using DomainScan tools to solve real problems.

- [Help Center](https://domainscan.in/help): Index of all help articles.
- [How to Check if an IP is Blacklisted](https://domainscan.in/help/how-to-check-blacklist): Using the IP Blacklist Checker to find and resolve DNSBL listings.
- [How to Check Email Authentication](https://domainscan.in/help/how-to-check-email-authentication): Verifying SPF, DKIM, and DMARC records for a domain.
- [How to Read a DNS Report](https://domainscan.in/help/how-to-read-dns-report): Understanding the DNS Query tool output — records, TTLs, and anomalies.
- [Troubleshoot Email Deliverability](https://domainscan.in/help/troubleshoot-email-deliverability): Diagnosing why emails land in spam using DomainScan's email auth tools.
- [Understanding DNS Propagation](https://domainscan.in/help/understanding-dns-propagation): What propagation means, how long it takes, and how to track it.
- [How to Check if a Domain Is Blacklisted](https://domainscan.in/help/how-to-check-domain-blacklist): Step-by-step guide to checking blacklist status, reading results, and requesting removal.
- [How to Tell If a Website Is Legitimate](https://domainscan.in/help/how-to-verify-website-legit): Seven concrete checks — domain age, SSL, blacklists, WHOIS — to verify site legitimacy.
- [How to Read DNS Records](https://domainscan.in/help/how-to-read-dns-records): Practical guide to A, AAAA, MX, CNAME, TXT, NS, SOA, CAA, and SRV records with troubleshooting.
- [What Does My Trust Score Mean](https://domainscan.in/help/what-does-my-trust-score-mean): Explains the six signal groups (blacklists, email auth, SSL, DNS, age, traffic) behind the 0–100 score.
- [How to Fix SPF Failures](https://domainscan.in/help/how-to-fix-spf-failure): Diagnose and fix softfail, hardfail, permerror, and DNS lookup limit errors in SPF records.
- [How to Add a DMARC Record](https://domainscan.in/help/how-to-add-dmarc-record): Step-by-step DMARC setup from p=none monitoring to p=reject enforcement.
- [How to Monitor Your Domain](https://domainscan.in/help/how-to-monitor-domain): What to monitor (expiry, SSL, blacklists, DNS, email auth) and how to set up alerts.
- [DomainScan API Quickstart](https://domainscan.in/help/api-quickstart): REST API authentication, endpoints, response format, and code examples in JS/Python/curl.
- [DomainScan MCP Quickstart](https://domainscan.in/help/mcp-quickstart): Connect DomainScan tools to Claude, Cursor, and other MCP-compatible AI assistants.

## Glossary

Plain-English definitions for domain, DNS, email, and security terms.

- [Glossary](https://domainscan.in/glossary): Full term index.
- [A Record](https://domainscan.in/glossary/a-record): Maps a domain to an IPv4 address.
- [Blacklist](https://domainscan.in/glossary/blacklist): DNS-based reputation list used to flag malicious IPs and domains.
- [CNAME Record](https://domainscan.in/glossary/cname-record): Canonical name alias — points one hostname to another.
- [DKIM](https://domainscan.in/glossary/dkim): Email signing standard using public/private key pairs.
- [DMARC](https://domainscan.in/glossary/dmarc): Policy framework that ties SPF and DKIM together with reporting.
- [DNS](https://domainscan.in/glossary/dns): Domain Name System — the internet's distributed naming database.
- [HTTPS](https://domainscan.in/glossary/https): HTTP over TLS — encrypted web traffic.
- [MX Record](https://domainscan.in/glossary/mx-record): Specifies mail servers responsible for accepting email for a domain.
- [Nameserver](https://domainscan.in/glossary/nameserver): DNS server that holds authoritative zone records for a domain.
- [Phishing](https://domainscan.in/glossary/phishing): Social engineering attack using deceptive domains or emails.
- [SPF](https://domainscan.in/glossary/spf): Sender Policy Framework — authorizes which IPs may send email for a domain.
- [SSL/TLS](https://domainscan.in/glossary/ssl-tls): Cryptographic protocols securing data in transit.
- [TTL](https://domainscan.in/glossary/ttl): Time to Live — how long DNS resolvers cache a record.
- [TXT Record](https://domainscan.in/glossary/txt-record): Arbitrary text DNS record used for SPF, DKIM, domain verification, and more.

## Comparisons

Side-by-side comparisons of DomainScan against alternative tools.

- [Comparisons Index](https://domainscan.in/vs): All tool comparison pages.
- [DomainScan vs DNSChecker](https://domainscan.in/vs/dnschecker): Propagation checking and DNS record lookup.
- [DomainScan vs DomainTools](https://domainscan.in/vs/domaintools): WHOIS intelligence and domain history.
- [DomainScan vs MxToolbox](https://domainscan.in/vs/mxtoolbox): Email authentication and DNS diagnostics.
- [DomainScan vs APIVoid](https://domainscan.in/vs/apivoid): IP/domain threat intelligence APIs.
- [DomainScan vs NSLookup.io](https://domainscan.in/vs/nslookup): DNS lookup tools.
- [DomainScan vs EasyDMARC](https://domainscan.in/vs/easydmarc): DMARC management and email security.
- [DomainScan vs Site24x7](https://domainscan.in/vs/site24x7): Domain and uptime monitoring.
- [DomainScan vs ViewDNS](https://domainscan.in/vs/viewdns): DNS and IP research tools.
- [DomainScan vs DomScan](https://domainscan.in/vs/domscan): Domain scanning and enumeration.

## Use Cases

Persona-specific playbooks — how DomainScan solves the exact pain each buyer role faces. Compliance-driven for the regulated verticals.

- [Use Cases Index](https://domainscan.in/use-cases): All buyer personas + capability mapping.
- [DomainScan for MSPs](https://domainscan.in/use-cases/msp): Multi-client domain monitoring, white-label reports, alerts routed to PSA.
- [DomainScan for Agencies](https://domainscan.in/use-cases/agency): Deliverability + DMARC journey for every client. Google/Yahoo bulk-sender rules covered.
- [DomainScan for E-commerce](https://domainscan.in/use-cases/ecommerce): SSL uptime, PCI DSS 4.0.1 anti-phishing evidence, checkout reliability.
- [DomainScan for Healthcare](https://domainscan.in/use-cases/healthcare): HIPAA, patient portal SSL, phishing → PHI defence.
- [DomainScan for Fintech](https://domainscan.in/use-cases/fintech): NIS2, PCI DSS 4.0.1, BEC prevention. €10M or 2% revenue fines covered.
- [DomainScan for SaaS](https://domainscan.in/use-cases/saas): Multi-tenant DMARC alignment, custom-domain SSL automation at scale.

## FAQ

Standalone Q&A pages — one answer per URL, ~200 questions across DNS, DMARC, SSL, subdomain security, JWT/hashing/UUID/Base64 developer topics, and provider-specific setup (Google Workspace, Microsoft 365, Cloudflare, Route 53, GoDaddy, Namecheap).

- [FAQ Index](https://domainscan.in/faq): All questions grouped by parent article.

## Optional

- [About DomainScan](https://domainscan.in/about): Background information about the platform and team.
- [Privacy Policy](https://domainscan.in/privacy): Data handling and privacy practices.
- [Terms of Service](https://domainscan.in/terms): Usage terms and conditions.
- [Contact](https://domainscan.in/contact): Contact information and support.