DNS Lookup
Choose a DNS record type to search for.
Propagation & diagnostics
Compare resolvers worldwide and inspect returned answers.
Keep history, monitor your zones and automate recurring checks.
Email Diagnostics
Tools to verify and validate your email authentication setup.
Secure & Monitor
Record generators, policy hosting and continuous monitoring.
Generators
Network & Web
Network tools, web page analysis and certificates.
IP Tools
My IP address
Detect your IPv4/IPv6 addresses and their geolocation.
Reverse lookup
Resolve a PTR record and validate DNS consistency.
IP WhoIs
Identify the owner of an IP range and its contacts.
IPv4 netmask
Calculate network, broadcast and usable hosts for any IPv4 block.
IPv6 subnet calculator
Calculate IPv6 subnets, address ranges and reverse DNS entries.
Certificates & BIMI
BIMI logo lookup
Inspect a BIMI logo URL - format, metadata and live rendering - before rollout.
BIMI SVG converter
Convert any SVG to BIMI-compliant Tiny-PS format in seconds.
CSR parser
Inspect a CSR, extract subject details, fingerprints and requested SANs.
VMC inspector
Inspect a Verified Mark Certificate - issuer, validity and SAN coverage - before you publish BIMI.
Web
Page size checker
Check if your page exceeds Google's 2 MB crawl limit.
Phishing URL Checker
Check if a URL is flagged as phishing or malware by 4 threat intelligence sources.
HTTP Headers Viewer
Inspect the HTTP headers returned by a URL, with security headers annotated.
HSTS Test
Analyze a domain's HSTS policy and its status on the Chromium preload list.
Redirect Checker
Analyze HTTP redirect chains
Domain Redirect
Redirect your domains with automatic HTTPS and 301/302 redirects.
HTTP Uptime Monitor
Monitor your sites with scheduled HTTP checks and email alerts.
Status Pages
Publish a public status page grouping your HTTP monitors.
Developer Tools
Text utilities and tools for everyday dev work.
Text
Transform and measure your content in seconds.
Text case converter
Convert any block of text to upper or lower case instantly.
Slug generator
Transform any sentence into an SEO-friendly slug in seconds.
Word & character counter
Measure the length of any text, with instant word and character counts.
Password generator
Generate strong random passwords and memorable passphrases instantly.
Developer
Encoding, hashing, regex and formatting for everyday dev work.
Base64 encoder / decoder
Encode or decode any content in Base64 without leaving the browser.
Hash Generator
Compute MD5, SHA-1, SHA-256 and SHA-512 hashes of any text.
URL encoder / decoder
Encode or decode text using percent-encoding (RFC 3986) right in your browser.
Regex Tester
Test a regular expression against text and visualize matches.
JSON / YAML Formatter
Format, validate and convert JSON and YAML in one click.
Domain-based Message Authentication implementation and policy configuration.
22 articles
Cloudflare now covers 4 email layers: free Email Routing, transactional Email Service (public beta April 2026), anti-phishing Email Security (formerly Area 1), and DMARC Management. Complete guide covering architecture, DNS, Proofpoint/Mimecast comparison, and pricing.
Cisco Secure Email Cloud Gateway (CES) is Cisco's primary SaaS offering in 2026, the successor to the legacy ESA appliances inherited from Ironport. Complete guide: CES onboarding, iphmx.com MX records by region (NA/EU/APJ), SPF/DKIM/DMARC, migration from ESA to CES, 2024-2025 Gartner Magic Quadrant exit, zero-day CVE-2025-20393, comparison with Proofpoint, Mimecast, Defender and Abnormal.
Abnormal Security is an API-native ICES platform that detects BEC, VEC, and Account Takeover attacks using behavioral AI, with no MX change required. Complete guide: Attune 1.0 architecture, Proofpoint/Mimecast/Defender comparison, limitations, and DNS record audit.
Proofpoint is the enterprise SEG benchmark, used by 87 of the Fortune 100. Complete guide: Nexus AI architecture, TAP, SPF/DKIM/DMARC configuration, the 2024 EchoSpoofing incident and a comparison with Mimecast, Microsoft Defender and Abnormal Security.
Mimecast is a cloud email gateway (SEG) that intercepts all traffic via MX redirection. Full guide: architecture, SPF/DKIM/DMARC setup, Proofpoint/Abnormal Security comparison, and DNS audit.
One in five emails never reaches the inbox. This guide shows you how to test your email deliverability before sending and fix every issue.
DMARCbis replaces RFC 7489, drops the PSL in favor of the DNS Tree Walk, adds three tags and splits reporting into three documents. This guide covers everything: how it works, migration, compliance.
91% of cyberattacks start with an email. Learn how to spot the warning signs, verify a suspicious link, and protect your inbox with the right protocols.
Are your emails consistently landing in spam? This guide analyzes the 5 main causes and gives you a concrete action plan to restore optimal deliverability.
From .dvag (10,562 domains) to .ferrari, .zara, and .google: discover why 494 global companies have invested in their own .brand TLD.
Add the CaptainDNS MCP server to ChatGPT and use 3 widgets to troubleshoot DMARC/DNS and analyze email headers without leaving the conversation.
Putting your logo in the inbox: what you actually need to configure in DNS for BIMI, and how to choose between VMC and CMC.
Gmail and Yahoo require a one-click unsubscribe via RFC 8058-compliant List-Unsubscribe headers. Here's the expected format, the server-side POST, and the compliance checklist.
Your logo changed but inboxes still display the old one? It is not only a DNS issue: mailbox providers cache BIMI assets. Discover how the cache layers work and how to plan a smooth BIMI migration.
Starting in November 2025, Google enforces new security requirements for bulk senders: full SPF/DKIM/DMARC authentication, TLS encryption and strict unsubscribe management.
AI-automated phishing emails average a click-through rate of roughly 54%. At scale, automation can make these campaigns up to ×50 more profitable. Both figures come from the Microsoft Digital Defense Report 2025 (MDDR 2025).
