Understand your DMARC aggregate reports.
Paste your rua XML report — see who's sending as your domain and what's failing.
How do I get this?
Check the email address set in your rua= DMARC record. Google, Yahoo, and others send daily XML reports as .zip attachments. Unzip and paste the XML contents here.
How do I get a DMARC report?
Check the email address in your DMARC record's rua= tag. Major providers (Google, Yahoo, Microsoft, etc.) send daily aggregate reports as .zip attachments. Unzip and open the .xml file, then paste its contents here.
What do pass and fail mean?
DKIM pass means the message was signed and the signature verified. SPF pass means the sending IP was allowed by your SPF record. If both fail for a source IP, that IP is sending as your domain without authorization — possible spoofing.
Does anything leave my browser?
No. Parsing and analysis run entirely in your browser. Your report XML is never sent to any server.