DomainDig 5.5.4

DomainDig is a fast, no-frills domain inspection tool for developers, sysadmins, and anyone who manages or troubleshoots servers and infrastructure.
Enter any domain and run a full diagnostic in seconds:

DNS: query A, AAAA, MX, NS, TXT, CNAME, SOA, SRV, CAA, and DS records including wildcard entries, with TTL values, DNSSEC status, and reverse DNS (PTR) lookup for the resolved IP.

SSL/TLS: inspect the full certificate chain — common name, SANs, issuer, validity dates, TLS version and cipher, and days until expiry with automatic color-coded warnings.

Email Security: parse SPF, DMARC, DKIM, MTA-STS, and BIMI records with pass/fail indicators so you can verify email deliverability at a glance.

HTTP Headers: fire a HEAD request and review all response headers, with security-relevant headers (HSTS, CSP, X-Frame-Options, and more) highlighted automatically.

Redirect Chain: trace every HTTP redirect hop from initial request to final destination, with status codes at each step.

Reachability & Ports: measure TCP latency on ports 80 and 443, and scan common ports (FTP, SSH, SMTP, MySQL, PostgreSQL, and more) to see what's open.

IP Geolocation: look up the hosting org, city, region, and country for the resolved IP, with a live map view.

Ownership & Subdomains: pull registrar, registration and expiry dates, and nameservers via RDAP, check domain availability, and discover subdomains.

Every result loads in parallel and independently, then rolls up into a risk score with plain-language insights.

Go beyond a single lookup:

- Monitor domains on a schedule and get alerts when DNS, TLS, or email records change.
- Group domains into Workflows and run them as a batch.
- Compare any two domains side by side, and track changes across a full snapshot history.
- Run structured Audit sessions with checklists, findings, and evidence.
- Export as text, CSV, JSON, Markdown, or PDF — single reports or whole portfolios.
- Home Screen widgets, Shortcuts, and a share extension put it where you work.
- Optional iCloud sync keeps your domains and history across your devices.
- A built-in local API exposes reports to your own scripts and automation.

Local-first by design: your data stays on device unless you export, share, or sync it.

No accounts. No ads. No tracking.

License: Free