What you’ll need
DMARC aggregate XML, XML.GZ or ZIP files, up to 10 MB compressed.
Email TOOL · FREE TO USE
DMARC Report Analyzer
Turn aggregate XML reports into readable authentication findings.
Runs on your device · Files stay privateYour email workspace
How it works
Local decompression and XML parsing; summarize reported source IPs and alignment.
Know the limits
Only the supplied reports are covered. IPs are not automatically attributed to providers or attackers.
GET FROM A QUESTION TO A NEXT STEP
Get a clearer result with DMARC Report Analyzer
Turn aggregate XML reports into readable authentication findings. DMARC aggregate XML, XML.GZ or ZIP files, up to 10 MB compressed. Review the supported scope below before adding a large file or using the result in a campaign.
How to use DMARC Report Analyzer
Open DMARC Report Analyzer and inspect its input labels. DMARC aggregate XML, XML.GZ or ZIP files, up to 10 MB compressed.
Use the synthetic example where available, or choose your own supported file. Set the options deliberately; processing takes place in your browser.
Run the workflow, read any warnings and inspect the output. Download the result only after checking the values or file preview; clear the workspace when finished.
What do the results mean?
Local decompression and XML parsing; summarize reported source IPs and alignment. Only the supplied reports are covered. IPs are not automatically attributed to providers or attackers.
What to do next
Check a small representative input first. For exported assets, reopen the downloaded file in its intended application before using it in production.
Keep the scope in mind
Only the supplied reports are covered. IPs are not automatically attributed to providers or attackers.
Common questions about DMARC Report Analyzer
Does DMARC Report Analyzer save my input?
This workflow uses browser memory. Downloads are saved by your browser, but tool inputs are not submitted to a server or stored by this tool.
What should I do if a result is unavailable?
Check the input format, units and limits. Only the supplied reports are covered. IPs are not automatically attributed to providers or attackers. An unavailable result does not establish that a campaign, document or email address is valid or invalid.