Supertool

One box for every domain check

Type a domain for a full email authentication report, or scope a single check with dmarc:, spf:, dkim:, mx:, mta-sts:, tls-rpt:, bimi:, blacklist:, plus dns:, ptr:, dnssec:, and whois: for DNS records, reverse DNS, DNSSEC, and registration data.

Live lookups, no account required. Get alerted when a domain's records change.

See plans →

What Supertool does

Supertool is one box for every domain check on DMARCdrift. Type a bare domain for a full email authentication report (DMARC, SPF, DKIM, MTA-STS, TLS-RPT, BIMI, MX, and PTR with an A to F grade), or lead with a prefix to scope a single check. It is the fastest way to look something up when you already know what you want, without hunting through the tools directory first.

How the query grammar works

A bare domain like example.com runs the full authentication report. dmarc:, spf:, bimi:, blacklist:, dns:, ptr:, dnssec:, and whois: route to the dedicated tools with their full output (parsed records, the SPF include tree, DNSBL listings, DNS records, reverse DNS, DNSSEC chain, registration data, and more). mx:, dkim:, mta-sts:, and tls-rpt: pull a single signal from the authentication scan. bl: is shorthand for blacklist:. Prefixes are case-insensitive, and a pasted URL is treated as a bare-domain lookup.

Frequently asked questions

What can I type into the box?
A bare domain runs the full email authentication report. Lead with a prefix and a colon to scope a single check: dmarc:, spf:, dkim:, mx:, mta-sts:, tls-rpt:, bimi:, blacklist: (also bl:), dns:, ptr:, dnssec:, or whois:.
Is this an mxtoolbox alternative?
Yes. If you are used to typing dmarc:example.com into a single box, Supertool gives you the same muscle memory for DMARC, SPF, DKIM, BIMI, blacklist, and a full authentication grade. It is free and needs no signup.
Why did my blacklist check say no MX records?
The blacklist check looks up the IP addresses of a domain's mail servers and tests those against public DNSBLs. A domain with no MX records has no mail servers to check, so there is nothing to look up. That is expected for parked or web-only domains.
What is the difference between a bare domain and a prefix?
A bare domain returns every signal at once with an overall grade. A prefix narrows the answer to one check and, for dmarc:, spf:, bimi:, blacklist:, dns:, ptr:, dnssec:, and whois:, links straight to that tool's full breakdown.

Checking domains often?

DMARCdrift watches your DMARC, SPF, and DNS records continuously and alerts you the moment one changes, before it affects deliverability.

Get started free →

Monitor every domain's authentication grade continuously. Free for one domain.

See plans →