DMARC Aggregate Report Parser
Parse DMARC aggregate (RUA) XML reports into a readable summary and per-source table. See SPF/DKIM alignment by IP — free, processed in your browser.
Parse a DMARC aggregate report
Paste the decompressed XML from a rua report (unzip the .gz/.zip first).
What this DMARC report parser does
Common use cases
- 1Understanding who sends email as your domain
- 2Finding unauthorised or spoofing sources
- 3Spotting a legitimate service that fails alignment
- 4Tracking alignment before advancing DMARC policy
- 5Reviewing reports without a paid monitoring service
- 6Auditing a new domain's mail sources
Related tools
About DMARC aggregate reports
Aggregate (RUA) reports are XML files that mailbox providers send daily to the address in your DMARC rua tag. Each report lists the IPs that sent mail claiming to be your domain, how many messages, and whether they passed SPF and DKIM alignment — the data you need to reach safe enforcement.
Providers compress the XML (gzip or zip), so decompress it before pasting here. This parser processes everything locally in your browser; nothing is uploaded. Use it to confirm every legitimate source aligns before moving to p=quarantine or p=reject.
More Free Tools Where This Came From
This utility is one of dozens of free, no-login tools for DNS, email, SEO and developers — all instant and private.
HostCloud.in · Pune, India · Serving 34,987+ Websites Since 2020
Got Questions? We Have Answers.
What is a DMARC aggregate report?
An aggregate (RUA) report is an XML file mailbox providers send daily to your DMARC rua address, listing every source that sent mail as your domain and whether it passed SPF and DKIM alignment.
Why do I need to decompress the file first?
Providers gzip or zip the XML to save space. Decompress it to plain XML, then paste the contents here.
Is my report uploaded anywhere?
No. Parsing happens entirely in your browser — the report never leaves your device.
What does the pass rate tell me?
It is the share of messages that passed DMARC alignment. You want legitimate sources at or near 100% before advancing to quarantine or reject.
A legitimate service is failing — what do I do?
Add its sending IPs to SPF or enable DKIM signing for it so it aligns with your domain, then confirm in the next report.
What are the disposition values?
none, quarantine or reject — the action the receiver applied based on your published policy at the time of the report.
