Check a domain email security in one view. digga analyzes SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI and shows how well the domain resists spoofing.
Apex, subdomain, or URL. We figure it out.
What you get
The SPF record is parsed and validated against the ten DNS lookup limit, a common reason SPF silently breaks.
See whether DMARC is set to none, quarantine, or reject, and whether it is actually enforcing or only monitoring.
DKIM selectors, MTA-STS, TLS-RPT, and BIMI are all surfaced so you can see the full posture in one place.
digga turns the records into a clear read on how well the domain resists spoofing, and flags common misconfigurations.
An email security check reads the DNS based policies that decide whether a message claiming to come from a domain is genuine. SPF, DKIM, and DMARC together stop attackers from spoofing a domain to send phishing or fraud. digga inspects all of them, plus MTA-STS, TLS-RPT, and BIMI, and turns the result into a clear picture of how well the domain is protected.
SPF lists the servers allowed to send mail for a domain. DKIM signs each message with a cryptographic key so receivers can verify it was not altered. DMARC ties the two together, tells receivers whether to quarantine or reject mail that fails, and enables reporting. A domain needs all three configured correctly to meaningfully resist spoofing. digga checks each one and explains what is missing.
MTA-STS tells sending servers to require encrypted, authenticated delivery, closing a downgrade attack on email in transit. TLS-RPT collects reports about delivery failures so you can spot problems. BIMI lets a domain display its logo in supporting inboxes once DMARC is enforcing. These records round out a strong email setup, and digga reports on each.
Email spoofing is one of the most common vectors for phishing, invoice fraud, and brand abuse. A domain with weak or missing SPF, DKIM, and DMARC can be impersonated by anyone. Getting these records right protects your recipients, improves deliverability to the inbox, and is increasingly required by major mailbox providers.
Keep digging
FAQ
Enter a domain to run the email security check now.
Apex, subdomain, or URL. We figure it out.