See where your apps send your data
Your Mac apps connect in the background to dozens of domains. Some are legitimate — API servers, CDNs, authentication services. Others are less harmless — analytics trackers, ad networks, telemetry endpoints. Without domain tracking, you can't tell the difference. NetMute logs every DNS query and TCP connection, organised by app.
How domain tracking works
NetMute monitors DNS resolutions and network connections at system level. Each connection is linked to the app that triggered it and logged with: target domain, IP address, port, data volume, and timestamp. Domains are automatically categorised as legitimate services, known trackers, ad networks, or unclassified.
When domain tracking reveals surprises
You might discover that your PDF reader connects to ad servers. That your weather app sends data to 15 different analytics endpoints. That a simple utility pings servers in countries you didn't expect. Domain tracking not only shows you what happens — it shows you what shouldn't.
Why domain-level visibility is essential
App-level blocking is useful, but sometimes you need finer control. An app might connect to both essential servers and tracking servers. With domain-level visibility, you can block trackers while keeping the app functional.
Key benefits
- Complete domain log per app with timestamps and data volume
- Automatic categorisation: legitimate, tracker, ad network, unknown
- Frequency tracking — see how often each domain is contacted
- Block individual domains without blocking the entire app
- Export connection logs for security audits
Frequently asked questions about domain tracking
Does domain tracking see encrypted content?
No. NetMute tracks which domains are contacted and how much data is transferred, not the content itself. HTTPS encryption remains intact.
Can I block a specific domain for only one app?
Yes. You can create domain-specific rules per app. Block analytics.google.com for your photo editing app, while allowing it for your browser.
How are domains categorised?
NetMute maintains a database of known trackers, ad networks, and analytics services. Domains not in the database are marked as unclassified.