# DomainDig — DNS lookup & SSL certificates > Domain inspection tool for DNS, SSL, email security, and network diagnostics. (iPhone/iPad app by Christian Cleberg.) - Source: https://appshunter.io/ios/app/domaindig/id6760368004 (this page in markdown: same URL + `.md`) - Developer: [Christian Cleberg](https://appshunter.io/developer/1883866326) - Category: Utilities, Developer Tools - Price: Free - Rating: 5.00/5 from 3 App Store ratings · 1 written reviews indexed - Age rating: 4+ - Requires: iOS 17.6 · 8 MB - Languages: American English - Released: 2026-03-22 - Data updated: 2026-08-26 - Monetization: free - User reviews in markdown: https://appshunter.io/ios/app/domaindig/id6760368004/reviews.md ## What is DomainDig? DomainDig is a fast, no-frills domain inspection tool for developers, sysadmins, and anyone who manages or troubleshoots servers and infrastructure. Enter any domain and run a full diagnostic in seconds: DNS: query A, AAAA, MX, NS, TXT, CNAME, SOA, SRV, CAA, and DS records including wildcard entries, with TTL values, DNSSEC status, and reverse DNS (PTR) lookup for the resolved IP. SSL/TLS: inspect the full certificate chain — common name, SANs, issuer, validity dates, TLS version and cipher, and days until expiry with automatic color-coded warnings. Email Security: parse SPF, DMARC, DKIM, MTA-STS, and BIMI records with pass/fail indicators so you can verify email deliverability at a glance. HTTP Headers: fire a HEAD request and review all response headers, with security-relevant headers (HSTS, CSP, X-Frame-Options, and more) highlighted automatically. Redirect Chain: trace every HTTP redirect hop from initial request to final destination, with status codes at each step. Reachability & Ports: measure TCP latency on ports 80 and 443, and scan common ports (FTP, SSH, SMTP, MySQL, PostgreSQL, and more) to see what's open. IP Geolocation: look up the hosting org, city, region, and country for the resolved IP, with a live map view. Ownership & Subdomains: pull registrar, registration and expiry dates, and nameservers via RDAP, check domain availability, and discover subdomains. Every result loads in parallel and independently, then rolls up into a risk score with plain-language insights. Go beyond a single lookup: - Monitor domains on a schedule and get alerts when DNS, TLS, or email records change. - Group domains into Workflows and run them as a batch. - Compare any two domains side by side, and track changes across a full snapshot history. - Run structured Audit sessions with checklists, findings, and evidence. - Export as text, CSV, JSON, Markdown, or PDF — single reports or whole portfolios. - Home Screen widgets, Shortcuts, and a share extension put it where you work. - Optional iCloud sync keeps your domains and history across your devices. - A built-in local API exposes reports to your own scripts and automation. Local-first by design: your data stays on device unless you export, share, or sync it. No accounts. No ads. No tracking. ## Key features - DNS record lookup (A, MX, NS, TXT, CNAME) - SSL/TLS certificate inspection - Email security record parsing (SPF, DMARC, DKIM) - HTTP header analysis - Redirect chain tracing - Port scanning and latency measurement - IP geolocation with map view ## Recent user reviews (1 of 1) All indexed reviews: https://appshunter.io/ios/app/domaindig/id6760368004/reviews.md ### 5/5 — Handy Application *2026-06-30* Very fast, accurate, and detailed query results - presented beautifully. The txt export is handy and cleanly formatted as well. Appreciate the ability to save favorites and manage history. Great job dev. ## Frequently asked questions about DomainDig ### What information can DomainDig provide about a domain? DomainDig offers comprehensive diagnostics including DNS records (A, AAAA, MX, NS, TXT, CNAME), full SSL/TLS certificate chains, email security records (SPF, DMARC, DKIM), HTTP headers, redirect chains, and TCP port reachability. It also provides IP geolocation data. ### Does DomainDig have ads? No, DomainDig is ad-free. The app description explicitly states 'No ads', ensuring an uninterrupted user experience for all its features. ### Is DomainDig free to use? Yes, DomainDig is completely free to use. There are no costs associated with downloading or utilizing any of its domain inspection and diagnostic features. ### What devices does DomainDig support? DomainDig is available for iOS devices, specifically supporting iPhones and iPads. It is designed to run on these platforms. ### How often is DomainDig updated? The latest version of DomainDig is 1.7.2, and it was last updated on April 10, 2026. This indicates a recent update, suggesting active development and maintenance. ### Can I save or export my domain lookups with DomainDig? Yes, DomainDig allows you to save domains for quick re-runs and browse your full lookup history with cached results. You can also export all your findings as a plain text file. ### What is the age rating for DomainDig? DomainDig has an age rating of 4+. This indicates it is suitable for users of all ages and does not contain content that would restrict its use by younger audiences. ### Does DomainDig require an account? No, DomainDig does not require any accounts to use its services. It is designed for immediate use without the need for registration or login. ## Version history (last 5 releases) ### 5.0.3 — 2026-08-22 You can now reach support at root@krz.sh. The source, privacy, and documentation links in App Info have moved to their new home as well. This release also adds safeguards that keep your saved inspection history loading correctly after an update, along with internal cleanup and build fixes. Inspections themselves work exactly as before. ### 5.0.2 — 2026-08-10 simple org move to krz.sh ### 5.0.1 — 2026-07-26 A major update — DomainDig has grown from a single-lookup tool into a full domain operations toolkit: • More checks: DNSSEC, CAA/DS/SOA/SRV records, MTA-STS and BIMI email records, RDAP ownership, domain availability, subdomain discovery, and open-port scanning. • A risk score with plain-language insights for every lookup. • Monitoring with change alerts, plus Workflows to run groups of domains as a batch. • Snapshot history with change tracking, and side-by-side domain comparison. • Audit Mode: checklists, findings, and evidence for structured reviews. • Export to CSV, JSON, Markdown, and PDF — not just plain text. • Home Screen widgets, Shortcuts, a share extension, and optional iCloud sync. • A local API for your own scripts and automation. • A complete accessibility pass: full Dynamic Type, VoiceOver, and light mode. Still local-first, with no accounts, no ads, and no tracking. ### 1.7.2 — 2026-04-10 Updated screenshots, support URL, and privacy policy URL ### 1.7.0 — 2026-04-04 DNS Records Added SOA, SRV, CAA, and DS record types. Each DNS section now shows a DNSSEC validation badge indicating whether the resolver authenticated the zone. A new Settings screen lets you switch between Cloudflare, Google, Quad9, or a custom DNS-over-HTTPS resolver. SSL / TLS The TLS version and negotiated cipher suite are now shown alongside the certificate details. The full certificate chain is displayed and expandable per entry. A link to crt.sh opens the domain's certificate transparency log. HSTS preload status is checked and shown inline. Email Security Added BIMI and MTA-STS record checks. DKIM selector detection now tries 10 selectors concurrently and shows which one matched. HTTP Headers Response headers now include a security grade (A–F) based on the presence of key security headers. The section header shows the HTTP status code, round-trip time, and negotiated protocol (HTTP/1.1, HTTP/2, HTTP/3). HTTP/3 availability via Alt-Svc is noted separately. Port Scanner You can now enter custom ports to probe on demand. Open ports attempt a banner grab and display the first line of any service response. Domains behind Cloudflare's proxy now show a warning explaining that only CF-proxied ports are reachable from the edge. Bug Fixes Fixed DNSSEC validation always showing as unsigned. Fixed port scan results being incorrect for Cloudflare-proxied domains. ## More apps by Christian Cleberg - [DayByDay – Learn](https://appshunter.io/ios/app/daybyday-learn/id6760321939) - [Hutch for Sourcehut](https://appshunter.io/ios/app/hutch-for-sourcehut/id6760742299) All apps by Christian Cleberg: https://appshunter.io/developer/1883866326 ## Related topics [domain lookup](https://appshunter.io/ios/topics/domain-lookup) --- *Data collected daily from the US App Store and indexed by [AppsHunter](https://appshunter.io/). User reviews are verbatim App Store reviews. Ratings, prices and chart positions refresh continuously; this snapshot is from 2026-08-26.*