krz/krz.sh

 1+++
 2title = "Domain Dig"
 3description = "DNS and SSL analysis, in your pocket."
 4weight = 2
 5
 6[extra]
 7link = "https://git.krz.sh/krz/domain-dig"
 8link_label = "Source"
 9appstore = "https://apps.apple.com/us/app/domaindig/id6760368004"
10privacy = "/privacy/domain-dig/"
11+++
12
13See how any domain is really configured and served.
14
15Domain Dig is a fast, native iOS app for inspecting a domain end to end. enter a
16name and get a full report: DNS records, email-security posture, the live TLS
17certificate and chain, HTTP headers, IP geolocation, and reachable ports — no
18account, no tracking, everything rendered in plain monospace.
19
20## why it exists
21
22the answers you need about a domain are scattered across a dozen web tools. Domain
23Dig pulls them into one screen you can run from your phone: reachability, records,
24certificates, and headers in a single scrollable report.
25
26## what it does
27
28- run a full lookup on any domain from one screen
29- read every DNS record type: A, AAAA, MX, TXT, NS, SOA, CNAME, SRV, CAA, DS, PTR
30- confirm DNSSEC and check reachability and the redirect chain
31- audit email security: SPF, DMARC, DKIM, MTA-STS, and BIMI
32- inspect the SSL/TLS certificate, SANs, validity, cipher, and full chain
33- review HTTP response headers with a security grade
34- geolocate the resolved IP and scan common ports
35- look up registration and ownership via RDAP
36- monitor domains and get alerts via webhook or Slack
37
38## interface
39
40everything about a domain on one report — tap through the certificate chain,
41email checks, and open ports.
42
43<div class="shots">
44<figure><img loading="lazy" src="https://i.krz.sh/apps/domaindig/screenshots/iPhone/01.png" alt="Lookup and DNS records"><figcaption>run a lookup, see everything</figcaption></figure>
45<figure><img loading="lazy" src="https://i.krz.sh/apps/domaindig/screenshots/iPhone/02.png" alt="Record types and email security"><figcaption>every record type and email check</figcaption></figure>
46<figure><img loading="lazy" src="https://i.krz.sh/apps/domaindig/screenshots/iPhone/03.png" alt="SSL certificate and chain"><figcaption>full TLS certificate and chain</figcaption></figure>
47<figure><img loading="lazy" src="https://i.krz.sh/apps/domaindig/screenshots/iPhone/04.png" alt="IP location and open ports"><figcaption>IP geolocation and open ports</figcaption></figure>
48<figure><img loading="lazy" src="https://i.krz.sh/apps/domaindig/screenshots/iPhone/05.png" alt="Saved domains"><figcaption>save the domains you watch</figcaption></figure>
49<figure><img loading="lazy" src="https://i.krz.sh/apps/domaindig/screenshots/iPhone/06.png" alt="Lookup history"><figcaption>history, kept on device</figcaption></figure>
50<figure><img loading="lazy" src="https://i.krz.sh/apps/domaindig/screenshots/iPhone/07.png" alt="Resolver settings"><figcaption>choose your DNS resolver</figcaption></figure>
51</div>
52
53## details that matter
54
55- DNSSEC validation and a live TLS version and cipher-suite readout
56- certificate chain depth, expiry countdown, and a jump to crt.sh
57- email-security checks that flag missing SPF, DMARC, DKIM, MTA-STS, or BIMI
58- a port scan that knows when a host sits behind Cloudflare's proxy
59- pick your resolver: Cloudflare, Google, Quad9, or a custom server
60
61## on your device
62
63- save domains you watch and revisit past lookups from history
64- everything is stored locally; nothing syncs to us
65- optional iCloud sync (off by default) carries settings and history across your devices via your own iCloud account