Domains

A domain in devtls is one thing to scan, with its own history. There are two kinds.

Web targets

A web target is a host and a port, 443 unless you say otherwise.

You type	devtls scans
example.com	example.com:443
example.com:8443	example.com:8443
https://example.com/login	example.com:443 — the scheme and path are dropped

The same host on two ports is two domains. Add a label (prod, staging, api) to tell them apart in the list.

Mail targets

A mail target is a mail domain and a set of ports. One mail scan checks every chosen port and the domain’s mail DNS records together.

Port	Protocol	TLS	Probed by default
587	SMTP submission	STARTTLS	yes
465	SMTPS	implicit	yes
993	IMAPS	implicit	yes
995	POP3S	implicit	yes
25	SMTP relay (MX)	STARTTLS	opt in
143	IMAP	STARTTLS	opt in
110	POP3	STARTTLS	opt in

The legacy and relay ports are opt-in: choose them when you run them. A mail target can probe up to all seven.

DKIM selectors. DKIM keys are published under a selector (selector._domainkey.example.com) that can’t be discovered from DNS. devtls tries the common ones; if yours is different, add it to the target and devtls checks that one too.

The same name can be both a web target and a mail target — they’re tracked separately.

Removing a domain

Deleting a domain deletes its scans with it. It frees a slot in your plan’s domain allowance immediately; scans already used this month stay counted.

What can’t be added

• Private addresses. A name that resolves to a private, loopback, link-local or cloud-metadata address is refused (400). The hosted scanner only reaches the public internet.
• More domains than your plan allows. Adding one past the limit returns PLAN_LIMIT; see Plans.
• The same target twice. devtls returns the existing one instead (409 DUPLICATE), so you can scan it again.