DMARC report analyzer
Turn an aggregate XML report into a readable list of sending sources and alignment results. Free, no signup, no report upload.
One XML file, up to 2 MB. Extract compressed attachments first. File contents are processed in your browser.
Read the report before changing the policy
A report is a receiver’s account of the mail it saw. Start with the domain, dates, and message count. Then inspect the sources that failed DMARC. A single IP can have multiple rows when results differ; this tool keeps those rows separate.
DMARC passes when at least one mechanism, SPF or DKIM, passes with alignment. The sample report has 100 messages: 90 pass through aligned DKIM, even though SPF is not aligned. The remaining 10 fail both checks.
Failure and disposition answer different questions
Alignment tells you whether a message passed DMARC. Disposition tells you the reported action: none, quarantine, or reject. Newer reports can also use pass for mail that passes DMARC under an enforcing policy. A failed message can have a disposition of none, for example under a monitoring policy or receiver override. Neither a pass nor a disposition of none proves inbox placement.
Confirm which sources belong to you. For a legitimate sender, check its DKIM signing domain and SPF return-path configuration. For an unfamiliar source, investigate before assuming it is malicious. Do not switch to reject based on one report alone.
Next, check your published email DNS records or read the DMARC policy guide. Building outbound email? See Hail’s email API.
Report fields and alignment interpretation follow RFC 9990. The reader also accepts legacy aggregate reports without an XML namespace. It is an analyzer, not a full XML schema validator.
FAQ
Where do I get a DMARC report?
Receivers can send aggregate reports to the rua address in your domain’s DMARC record. Look for an XML attachment in that mailbox. Extract .gz or .zip attachments before using this tool. A report covers one receiver and a reporting period, not all mail sent by your domain.
Does a DMARC failure mean someone spoofed my domain?
Not necessarily. An unconfigured legitimate sender or an indirect mail flow can also fail alignment. Match the sending source to your services before changing DNS or enforcement. This tool does not identify the owner of an IP address or authenticate the report itself.
Can SPF pass while DMARC fails?
Yes. Raw SPF authentication can pass for a return-path domain that does not align with the visible From domain. This analyzer uses policy_evaluated SPF and DKIM results, which include DMARC alignment, rather than treating auth_results passes as DMARC passes.
Is my report uploaded?
No. Parsing, filtering, and CSV creation happen in your browser. The tool does not save reports or send their contents to a server. Choose Clear to remove the report from the tool. This version accepts one uncompressed XML file up to 2 MB.
More free tools: AI Voice Agent Prompt Builder · AI Voice Agent Cost Calculator · SMS Length & Segment Calculator · Email Deliverability Checker · all tools
Compare: Hail vs SendGrid · Hail vs AgentMail · all comparisons