DMARC Report Analyzer
Paste or upload a DMARC aggregate (RUA) report and see exactly who's sending as your domain — total volume, pass/fail, and the senders failing authentication. Runs entirely in your browser; nothing is uploaded.
Paste your report XML
How to read a DMARC report
Alignment is what matters
DMARC only passes when SPF or DKIM passes and the domain aligns with your From address. A high raw-SPF pass rate can still hide DMARC failures.
Failing ≠ always spoofing
Failing sources are often your own tools (CRM, invoicing, help desk) that aren't authorized yet. Authorize the legitimate ones before you enforce.
One report is a snapshot
Each report covers one reporter and (usually) one day. You need the trend across every mailbox provider over weeks to make enforcement decisions safely.
Disposition = what happened
none means delivered despite the result; quarantine/reject mean your policy acted. At p=none nothing is enforced yet.
Stop reading raw XML one file at a time
DDMARC ingests every aggregate report automatically and turns them into readable trends — per-sender pass rates, alignment, and the safe path to enforcement. Free for 2 domains, no card.
More free tools
DMARC Record Generator
Create a valid DMARC record for your domain. Configure policy, reporting emails, and advanced options.
Use ToolSPF Record Generator
Build an SPF record to authorize your email senders. Includes common services and DNS lookup counter.
Use ToolDomain Checker
Check your domain's email authentication setup. See your SPF, DKIM, DMARC, and MTA-STS configuration.
Use ToolDMARC Record Lookup
Look up any domain's DMARC record and get every tag explained — policy, alignment, reporting, and coverage.
Use ToolDKIM Record Checker
Check a domain's DKIM record by selector. See the key type, size, and each tag, with quick-picks for common providers.
Use ToolMTA-STS & TLS-RPT Checker
Check a domain's MTA-STS policy record and TLS-RPT reporting — the pair that forces inbound mail over TLS.
Use ToolBIMI Record Checker
Look up a domain's BIMI record, preview the logo, and confirm the VMC and DMARC enforcement it requires.
Use Tool