Free email tool
Turn a DMARC aggregate report into a readable table: who sent mail as your domain, how much of it passed, and which senders still fail SPF or DKIM alignment.
The report is read in memory and is not stored or logged. No email needed.
The report is opened and parsed by the same code CloudSpex uses for the reports it collects for monitored domains, so the numbers here match what the dashboard would show. A record that cannot be read is skipped and counted on the page, never filled in with a guess.
To check the DMARC record itself, use the DMARC Checker; to create or tighten one, the DMARC Record Generator.
Receivers such as Google and Microsoft email them daily to the address in the rua= tag of your DMARC record. They arrive as .zip or .gz attachments containing one XML file. Upload the attachment as it is; there is no need to unpack it.
No. It is read in memory for this one response and is not saved, logged or added to any account. The result page is marked not to be cached.
DMARC needs SPF or DKIM to pass for YOUR domain (alignment). Many services pass SPF for their own bounce domain, which does not count. The fix is usually to set up DKIM signing with your domain in that service.
What the receiver did with failing mail under your policy: none (delivered), quarantine (spam folder) or reject. It is the action taken, not the authentication result.
When a passing DKIM signature or SPF domain belongs to a known provider, the provider is named and the evidence is shown. Otherwise the reverse DNS (PTR) name of the sending IP is looked up for the top sources; if there is none, only the IP is shown.
Add your domain to CloudSpex to collect every DMARC report automatically, see trends and new senders, and get alerted when a source starts failing.
Start Monitoring Free