# DomainsAlone.Net

> DomainsAlone.Net is an open, high-performance domain intelligence and network diagnostic platform built for hosting support teams, system administrators, cybersecurity professionals, and developers.

## Direct Query Endpoints

AI agents and automated tools can directly access reports by querying canonical HTTP GET URLs:

- **All-in-One Master Intelligence Report**: `https://www.domainsalone.net/domain/{domain}`
- **Whois & Domain Ownership Lookup**: `https://www.domainsalone.net/whois/{domain}`
- **DNS Records (A, AAAA, MX, NS, TXT, CNAME)**: `https://www.domainsalone.net/dns/{domain}`
- **Email Security (SPF, DKIM, DMARC, SMTP Handshake)**: `https://www.domainsalone.net/email-security/{domain}`
- **SSL Certificate Details & Full Chain Validation**: `https://www.domainsalone.net/ssl/{domain}`
- **Website & Server Details (Tech Stack, Headers, Control Panel)**: `https://www.domainsalone.net/website/{domain}`
- **IP Address Geolocation & ASN Details**: `https://www.domainsalone.net/ip/{ip_address}`
- **DMARC XML/ZIP Report Analyzer**: `https://www.domainsalone.net/dmarc.php`

## Diagnostic Capabilities

1. **Whois & RDAP Resolution**:
   - Primary: IANA RDAP bootstrap protocol via HTTPS for modern gTLDs and ccTLDs.
   - Fallback: Direct TCP port 43 stream queries to authoritative registry servers.
   - Extracts: Registrar name, IANA ID, registration date, expiration date, EPP domain statuses, nameserver delegations, and administrative/technical contacts (with GDPR redaction handling).

2. **Parallel DNS-over-HTTPS (DoH)**:
   - Queried via Google Public DNS (`dns.google/resolve`) with concurrent execution.
   - Evaluates: A (IPv4), AAAA (IPv6), NS (Nameservers), MX (Mail Exchangers with priority), TXT (Text records), CNAME (Subdomains), and 15 common DKIM selectors (Google, Microsoft 365, Zoho, Amazon SES, SendGrid, Mailgun, Postmark, etc.).

3. **Email Authentication & Security**:
   - **SPF Validation**: Syntax analysis, evaluation of all mechanisms (`include`, `ip4`, `ip6`, `a`, `mx`, `all`), qualifier parsing, and strict verification of the 10 DNS lookup limit (RFC 7208).
   - **DMARC Parsing**: Validation of tags (`v`, `p`, `rua`, `ruf`, `pct`, `adkim`, `aspf`, `sp`), policy enforcement classification (`none`, `quarantine`, `reject`), and aggregate reporting configuration.
   - **SMTP Port 25 Handshake**: Direct TCP handshake with primary MX server, measuring connection latency (ms) and banner inspection.
   - **DNSBL Blacklist Reputation**: Live status check against Spamhaus ZEN, SpamCop, Barracuda Central, SORBS, and DroneBL.

4. **SSL / TLS Certificate Chain**:
   - OpenSSL raw socket extraction of peer certificates and intermediate CA chain.
   - Validates chain of trust, SANs (Subject Alternative Names), signature algorithms, issuer identity, and exact days until expiration.

5. **Server & Web Technology Fingerprinting**:
   - Detects web servers (Nginx, Apache, LiteSpeed, Microsoft IIS, Cloudflare).
   - Fingerprints hosting control panels (cPanel, Plesk, DirectAdmin, Webuzo, CyberPanel, Vesta/Hestia).
   - Identifies CMS and frameworks (WordPress, Shopify, Joomla, Drupal, React, Vue, Angular, Bootstrap, Tailwind CSS, Stripe, PayPal).
   - Security headers audit (HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy).

## Machine-Readable Data Format

Every domain report contains:
- Semantic HTML5 with explicit tables and clean text.
- Natural-language summary digest for direct quoting.
- Embedded `Schema.org` structured data in JSON-LD format (`SoftwareApplication`, `BreadcrumbList`, and `FAQPage`).