DMARC Report Parser
Parse DMARC aggregate report XML files and get a clear breakdown of SPF, DKIM and DMARC pass/fail results by source IP.
Frequently asked questions
What is a DMARC aggregate report?
DMARC aggregate reports (rua) are XML files sent by email providers (Gmail, Outlook, etc.) to domain owners. They summarise which emails passed or failed SPF, DKIM and DMARC checks.
Where do I get these reports?
If your domain has a DMARC record with a rua= tag, email providers will send aggregate reports to that address. They typically arrive daily as ZIP or XML attachments.
What should I look for?
Look for source IPs that fail SPF and DKIM. Failed emails from unknown IPs may indicate spoofing. Legitimate failures usually mean your email provider's DNS or DKIM config needs fixing.