DMARC Report Reader
DMARC Report Reader
Upload the .zip or .xml.gz, just as your provider emailed it, or paste the XML, and see which senders are passing DMARC and which are failing.
About this tool
Where do I get DMARC aggregate reports?
Configure an rua address in your DMARC record (e.g. rua=mailto:dmarc@yourdomain.com). Major providers like Gmail, Yahoo, and Microsoft automatically send daily XML reports to that address.
What does 'disposition: none' mean?
The receiving server allowed the message through. This is the expected result when your DMARC policy is p=none (monitoring mode). Once you move to quarantine or reject, failed messages are actioned.
Why would a legitimate IP show as DMARC fail?
A sending service (CRM, ESP, billing tool) uses your domain in the From address but sends from its own IPs, which aren't in your SPF record or signed with your DKIM key. Add those services to your SPF/DKIM configuration.
What should I look for in reports?
Check for unexpected source IPs sending as your domain. These could be spoofers. Also look for your own sending sources showing as fail, which indicates SPF or DKIM isn't configured correctly for that service.
My report is a .zip or .gz file. Can I still read it?
Yes. Upload the file exactly as your provider sent it. Google, Microsoft and Yahoo compress aggregate reports, and this tool unpacks .zip and .xml.gz for you. There is no need to extract anything first.
Is my report stored anywhere?
No. A pasted report is parsed in your browser and never leaves it. An uploaded file is parsed in memory on the server and the result is returned in the same response. Nothing is written to disk or to a database.