Understand your DMARC aggregate reports.
Parse and analyze your DMARC aggregate reports — paste the XML from your rua= inbox and get an instant visual breakdown of sending IPs, SPF and DKIM results, and spoofing attempts. Use it to read reports quickly. Parsing stays in your browser.
How do I get this?
Look at the address in your DMARC record’s rua= tag — that inbox gets zipped XML from Gmail, Yahoo, and others. Unzip, open the .xml, paste it here.
How do I get a DMARC report?
Yes — use the mailbox in rua=. Big providers email you a .zip every day. Unzip it, copy the .xml body, paste here.
What do pass and fail mean?
DKIM pass = signature checked out. SPF pass = the sending IP matched your SPF list. If both fail for an IP, that IP sent as you without matching either check — treat it as possible spoofing or a misconfigured sender.
Does anything leave my browser?
No. We parse the XML locally. Nothing uploads to us.