DMARC XML viewer with MailAuth Doctor
The DMARC reports tab opens with a sample report loaded so you can see the output. Drop your own files to read them; they are parsed locally.
- Open the DMARC reports tab and read the sample to see the layout.
- Choose your .xml, .gz or .zip report files from Google, Microsoft or others.
- Read each sending IP: volume, SPF and DKIM results and the plain-English reason it failed.
- Fix the failing legitimate senders, then raise your policy.
What to know
A DMARC aggregate report is an XML file that a mailbox provider sends to the address in your rua tag, usually once a day. It lists every sending IP that used your domain, how many messages, and whether SPF and DKIM passed and aligned. The files arrive as attachments, often compressed as .gz or .zip, and are tedious to read by hand.
The reader unpacks the files and groups the rows by sender. For each failing sender it explains the usual causes: SPF passed but for the sender's own bounce domain, so it does not align with your From domain; DKIM passed with the sender's domain, not yours; or both failed because the IP is not authorised. Those are three different fixes, and the report only shows which applies.
Everything happens in your browser: files are decoded locally and never uploaded. Reports are usually small, but they can contain the IP addresses of your senders and recipients' mail servers, which is another reason to keep them off third-party sites.
Updated · Cosmovex
Questions
How do I read a DMARC XML report?
Open it in a reader that groups rows by sending IP and shows SPF, DKIM and alignment results. The reader here does that and explains failures in plain English.
Why do I get DMARC reports as .zip or .gz files?
Mailbox providers compress the XML to save bandwidth. The reader opens .xml, .gz and .zip files directly.
Are my DMARC reports uploaded?
No. Files are parsed in your browser and never sent to a server.
What does "not aligned" mean?
SPF or DKIM passed, but for a domain that is not the same as, or in the same organisation as, the From domain. DMARC needs at least one method to pass and align.
The free plan covers everything on this page. MailAuth Doctor Pro ($7/mo, billed monthly) is described on the MailAuth Doctor page.
