Free DMARC Report Viewer
Drop a DMARC aggregate report file below to instantly view it in a human-readable format. Supports raw XML, gzipped XML (.xml.gz), and ZIP archives. Your file is parsed entirely in your browser and never uploaded to any server.
Drop a DMARC report file here, or click to browse
Supports .xml, .xml.gz, and .zip files
Your file is processed entirely in your browser. Nothing is uploaded to our servers.
What Are DMARC Aggregate Reports?
When you publish a DMARC record with an rua= tag, email receivers (Google, Microsoft, Yahoo, etc.) send you daily aggregate reports. These XML files contain a summary of every email that claimed to come from your domain, including the source IP, whether it passed SPF and DKIM checks, and what action was taken based on your DMARC policy.
Why Are They Hard to Read?
Reports arrive as compressed XML attachments (usually .xml.gz or .zip). The raw XML is machine-readable but painful for humans. A single report from Google for a busy domain can contain hundreds of <record> blocks. This tool decompresses and parses the XML into a sortable, colour-coded table so you can quickly identify failures and unknown senders.
What This Tool Shows You
- Pass rate: What percentage of messages passed DMARC authentication.
- Source IPs: Which servers sent email as your domain, with message counts.
- SPF and DKIM results: Per-source authentication outcomes with expandable detail rows showing selectors, domains, and scopes.
- Policy disposition: Whether messages were delivered, quarantined, or rejected based on your published policy.
- Published policy snapshot: The DMARC policy that was in effect during the reporting period.
Privacy First
This tool runs entirely in your browser using JavaScript. Your DMARC report file is never uploaded to our servers or any third party. The decompression (gzip, ZIP) and XML parsing all happen locally. You can verify this by checking the Network tab in your browser's developer tools while using the tool.
Need Automated Report Processing?
This free tool is great for reading individual reports. If you receive dozens of reports daily and need automated ingestion, trend analysis over time, sender identification, and alerting on new failures, join the early access list for up to 90 days free.
Not receiving DMARC reports yet?
Use our DMARC Checker to verify your domain has a DMARC record with an rua= tag configured. Reports typically start arriving within 24-48 hours.
Frequently Asked Questions
Who sends DMARC aggregate reports?
Any email receiver that supports DMARC reporting will send aggregate reports to the address in your rua= tag. Major senders include Google, Microsoft (Outlook/Hotmail), Yahoo, Apple, Comcast, and many enterprise email gateways. You may receive reports from providers you have never heard of if they process email claiming to be from your domain.
How do I start receiving DMARC reports?
Publish a DMARC record with an rua= tag pointing to your email address. For example: v=DMARC1; p=none; rua=mailto:[email protected]. Reports typically start arriving within 24 to 48 hours. Use our DMARC Checker to verify your record is correct.
Is it safe to upload my DMARC reports here?
Yes. This tool runs entirely in your browser. Your report file is decompressed and parsed using client-side JavaScript. No data is sent to our servers or any third party. You can verify this by checking the Network tab in your browser's developer tools while using the tool.
What should I look for in a DMARC report?
Focus on rows where DMARC disposition is "quarantine" or "reject", and rows where SPF or DKIM show "fail". These indicate emails that either failed authentication or were actioned by your policy. Check the source IPs to determine if they are legitimate senders you need to authorise or spoofing attempts your policy is correctly blocking.