By Tim King · Updated
DMARC Report Viewer
Read DMARC Aggregate XML, gzip or zip Reports as a Table, Without Uploading
OneTask is free, with no sign-up, and built by one person.
If this tool saved you time, a coffee helps keep new ones coming.
How the DMARC Report Viewer works
This DMARC report viewer turns the XML aggregate reports that mail providers send you into a readable table. Open the .xml, .gz or .zip attachment straight from the email, or paste the XML, and see which servers sent mail as your domain and whether each one passed.
What the DMARC report viewer shows
Once your domain has a DMARC record with a rua address, providers such as Google, Microsoft and Yahoo send a daily report. Each one lists the IP addresses that sent mail claiming to be from your domain, how many messages came from each, and the SPF, DKIM and DMARC results.
The viewer groups those rows by source IP. A passing verdict means at least one of SPF or DKIM passed and lined up with your From domain. A failing row is either a legitimate service you have not set up yet, such as a newsletter or invoicing tool, or someone spoofing your domain. Look up failing IPs to tell the two apart, then add real services to SPF and turn on their DKIM signing.
The summary shows the reporting organisation, the date range, the policy they saw and your overall pass rate. Compressed files are opened with the browser's built-in decompression, so reports stay on your computer.
FAQ
Why do forwarded messages fail DMARC?
Forwarding sends the message from a new server, which breaks SPF. DKIM usually survives unless the forwarder changes the message, such as a mailing list adding a footer. A small number of forwarding failures is normal and not a reason to delay moving to quarantine.
What does "disposition none" mean when a message failed?
It means the receiver delivered the message as normal, because your policy was none or the percentage tag excluded it. The disposition shows what happened, while the SPF and DKIM columns show whether it passed.
Can I open several reports at once?
Open one report at a time. Each report covers one provider and usually one day, so look at the biggest senders such as Google and Microsoft first, since they cover most of your mail.
See also: all Security & Identifiers tools, Dev Utilities, Formatters & Validators, Data & Encoding, SEO, Accessibility, AI.
Related tools
DMARC Record Generator
Build a DMARC record with the right policy and report addresses.
SPF Record Generator
Build an SPF record from the email services you actually use.
Email Header Analyzer
Trace an email's route and check its SPF, DKIM and DMARC results.
Email DNS Record Checker
Check an SPF, DKIM or DMARC record before you publish it.
.env File Checker
Lint a .env file for syntax errors, duplicates and weak secrets.