Softricks iDig

DNS made simple and easy to diagnose and fix.

iDig is a suite of products - with a robust 20 endpoint API at the base, Mobild apps, an AI Agent and a MCP Server - all serving a This is an iPhone App, which presents a unified view of DNS Resolution, Records and WHOIS information for a domain in an easy-to-understand way. It does not simply dump the raw output of the 'dig' command in UNIX. The Softricks iDig API that the App uses, fires off multiple requests and compiles data and provides diagnostics. The API also provides a Batch feature with async jobs to process bulk Domain queries.

Here's a clean feature list for iDig:

DNS Lookup & Resolution

• Query all major record types: A, NS, SOA, DS, TXT, CNAME, CAA, SRV, TLSA, HTTPS, SVCB
• Nameserver override support for targeted queries
• DNSSEC, reverse lookup, and authoritative query options
• Resolution health diagnostics with status codes (ok, nxdomain, servfail, etc.)

DNSSEC

• Full chain-of-trust validation (Root → TLD → domain)
• DNSKEY inventory with KSK/ZSK breakdown and key tags
• RRSIG expiry tracking with days-remaining alerts
• Algorithm assessment with migration recommendations
• Rollover readiness and DS-at-parent verification

Email Security Auditing

• SPF analysis: syntax, qualifier strength, DNS lookup count enforcement
• DKIM probing across common and provider-inferred selectors
• DMARC policy evaluation: none/quarantine/reject, reporting addresses, alignment
• BIMI record detection with logo URL and VMC validation
• Overall A–F deliverability grade with prioritized fix recommendations

SSL/TLS & DANE

• Certificate inspection: validity, expiry, SANs, issuer, domain match
• Upcoming expiry warnings at 7, 30, and 90-day thresholds
• DANE/TLSA cross-validation against live certificate hashes
• Support for all four TLSA usage types (PKIX-TA, PKIX-EE, DANE-TA, DANE-EE)

DNS Propagation & Zone Health

• Propagation checks across 16 global resolvers simultaneously
• Zone consistency auditing across all authoritative nameservers
• AXFR zone transfer vulnerability detection
• TTL advisory with migration readiness scoring and step-by-step lowering schedule

Domain Intelligence

• Parsed WHOIS with registrar, lifecycle dates, domain age, and expiry countdown
• EPP/registrar lock status with plain-English status code decoding
• IP geolocation with ISP, ASN, hosting detection, and timezone
• IP blacklist/DNSBL checks across Spamhaus, Barracuda, SpamCop, SORBS, and more

Infrastructure Discovery

• Subdomain discovery probing ~70 common names plus Certificate Transparency logs
• MX health checks with 35+ mail provider detection and RFC compliance validation
• HTTP/HTTPS reachability with full redirect chain and HSTS inspection
• Full domain diagnosis aggregating resolution and DNSSEC health in one call

Developer & Integration Features

• Async batch processing for up to 100 domains per request
• Token scopes for API, mobile, agent, and MCP use cases
• Plan tiers: Free, Pro, Business, and Unlimited
• RESTful JSON API with full OpenAPI 3.1 spec