DMARC Report Reader
DMARC Report Reader
Paste or upload a DMARC aggregate report (XML) to see a human-readable breakdown by source.
About this tool
- Where do I get DMARC aggregate reports?
- Configure an rua address in your DMARC record (e.g. rua=mailto:dmarc@yourdomain.com). Major providers like Gmail, Yahoo, and Microsoft automatically send daily XML reports to that address.
- What does 'disposition: none' mean?
- The receiving server allowed the message through. This is the expected result when your DMARC policy is p=none (monitoring mode). Once you move to quarantine or reject, failed messages are actioned.
- Why would a legitimate IP show as DMARC fail?
- A sending service (CRM, ESP, billing tool) uses your domain in the From address but sends from its own IPs, which aren't in your SPF record or signed with your DKIM key. Add those services to your SPF/DKIM configuration.
- What should I look for in reports?
- Check for unexpected source IPs sending as your domain — these could be spoofers. Also look for your own sending sources showing as fail, which indicates SPF or DKIM isn't configured correctly for that service.