Glossary
DMARC Aggregate Report — How to Read It
A DMARC aggregate report (RUA report) is a daily XML file sent by receiving mail servers — Google, Microsoft, Yahoo — showing every IP address that sent email using your domain, and whether those emails passed SPF and DKIM. These reports are the primary tool for identifying unauthorised senders and verifying that legitimate senders are properly aligned before tightening your DMARC policy.
How to Get Reports
Add rua=mailto:dmarc@yourdomain.com to your DMARC record. Reports arrive as .zip attachments containing XML files.
How to Read Reports
Use DomainPreflight DMARC Report Analyzer — paste the XML and get a visual summary showing passing and failing senders, spoofing detection, and policy upgrade recommendations.
Paste aggregate XML into the analyzer
Open DMARC Report Analyzer →FAQ
What is a DMARC aggregate report?
A daily XML report from major mail providers showing every IP that sent email as your domain and whether SPF/DKIM passed.
How do I receive DMARC reports?
Add rua=mailto:your@email.com to your DMARC TXT record. Reports arrive as .zip files containing XML.
How do I read DMARC XML reports?
Use DomainPreflight's DMARC Report Analyzer — paste the XML for a visual summary of senders, pass/fail rates, and spoofing detection.