Email

Generate a BIMI DNS TXT record with logo and evidence URLs, DMARC readiness checks, provider paste steps, charts, and exports.

Validate a domain's BIMI record with DMARC, SVG logo, resolver, and PEM evidence checks, then review readiness scores and fix notes.

Check bulk sender readiness for Gmail, Yahoo, and Outlook with DNS, header, complaint-rate, unsubscribe, and DMARC alignment evidence.

Validate DANE TLSA records for mail or TLS services with owner-name routing, DNSSEC AD checks, digest comparison, and readiness scoring.

Generate a DKIM DNS TXT record from a selector, domain, and public key with key-strength checks, split-string guidance, and DNS publish fields.

Validate a DKIM selector in public DNS, inspect the TXT key record, key strength, testing flags, and resolver evidence before troubleshooting mail authentication.

Build a DMARC TXT record with owner labels, policy tags, report URIs, external authorization notes, rollout warnings, and DNS split guidance.

Validate a domain's DMARC record in public DNS, review policy alignment, report destinations, rollout signals, and control scores before enforcement changes.

Audit a domain's public DNS records, compare resolver snapshots, and spot missing authority, mail, address, policy, TTL, or timing risks.

Check raw email headers in your browser for relay delays, SPF/DKIM/DMARC alignment, ARC context, sender mismatches, and spoof-risk clues.

Build an email signature with rendered HTML, plain-text output, normalized contact links, width checks, and compatibility audit notes.

Check an email domain's MTA-STS TXT record, HTTPS policy, MX coverage, cache window, and policy-host certificate before enforce mode.

Look up a domain's MX records, compare public resolver answers, and flag Null MX conflicts, unresolved hosts, CNAME targets, and mail-policy clues.

Look up SMIMEA or OPENPGPKEY DNS records for a mailbox, derive the owner name, and compare DNSSEC, resolver, and payload evidence.

Build an SPF TXT record from real sender paths, provider includes, IP ranges, A/MX options, redirects, and lookup-budget warnings.

Check a domain's SPF record, trace include and redirect lookup cost, and spot duplicate records, weak endings, or over-limit policies.

Validate a TLS-RPT record, review rua report destinations and related mail-policy signals, and build a DNS TXT snippet for publishing.