All tools
DMARC Report Reader
Upload your DMARC reports from Google, Yahoo, or Microsoft to instantly decode them into a human-readable format.
Upload XML Report
Select a raw .xml, .gz, or .zip aggregate report from Google, Yahoo, or Microsoft to analyze it instantly.
🔒 100% Client-side. Your data never leaves your browser.
Where do I get this file?
If you have a DMARC record set up for your domain with a rua=mailto:... tag, providers like Google and Yahoo will automatically email aggregate reports to that address every day.
These reports arrive as a .zip or .gz attachment. Upload the attachment as it came — this tool decompresses it in your browser. A raw .xml file works too.
How to read your DMARC reports
Aggregate DMARC reports are sent by mailbox providers (like Google and Microsoft) to domain owners. They provide visibility into every server on the internet that is attempting to send email using your domain.
1. Check the Total Volume
Does the total volume of emails sent match your expectations? If the volume is dramatically higher than what you actually sent, a spammer or malicious actor may be attempting to spoof your domain.
2. Review the Alignment Rate
To pass DMARC, a message needs SPF or DKIM to pass and the passing one to align with the domain your recipients see in the From line. These are two different checks, and a message can pass SPF while failing DMARC because the SPF check validated a different domain — the return-path — than the one displayed. That is why "everything passes but DMARC fails" happens. If you see failures from senders you recognise, such as your marketing platform or helpdesk, fix the alignment before you tighten your policy.
3. Identify Failing IP Addresses
In the "Source IP Records" table, look for rows where the disposition is none but SPF and DKIM alignment both failed. If those IPs belong to services you use, you have an authentication gap. If they are unknown, they are likely spoofers being caught by the receiving servers.
Fix your deliverability permanently
Reading reports is only half the battle. Get the step-by-step system for configuring SPF, DKIM, and DMARC correctly.
Get the Playbook