DMARC Report Viewer

Turn aggregate (RUA) XML reports into a readable summary of who is sending as your domain

Processed entirely in your browser — nothing is uploaded.

Drop report files here

.xml, .xml.gz or .zip — exactly as the reporter emailed them. Several at once is fine.

Choose files

How to read a DMARC aggregate report

When you publish a DMARC record with an rua= address, receivers such as Google, Microsoft and Yahoo email you a daily XML summary of every message they saw claiming to be from your domain. Each report groups messages by source IP and tells you whether they passed DKIM and SPF in alignment with your From domain.

DMARC pass means at least one of aligned DKIM or aligned SPF passed. Those messages are legitimate as far as the receiver is concerned.
Fails from your own providers (your mail host, CRM, newsletter tool) usually mean a missing DKIM key or an SPF include — fix those first.
Fails from unknown IPs are either forwarding (look for an override reason) or spoofing. Reverse DNS on the IP is the quickest tell.
Disposition shows what the receiver actually did — none, quarantine or reject — based on your published policy and percentage.

Reports arrive as .xml.gz or .zip attachments. Drop them here as-is; nothing leaves your browser.