DMARC Report Reader
Pricing
from $30.00 / 1,000 report parseds
DMARC Report Reader
Turns DMARC aggregate (RUA) report files (.xml, .gz, .zip) into a plain-English summary: who is sending email as your domain, what passes, what fails, and exactly what to fix.
Pricing
from $30.00 / 1,000 report parseds
Rating
0.0
(0)
Developer
Jashan Sandhu
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
4 hours ago
Last modified
Categories
Share
Turn the unreadable DMARC aggregate report files in your inbox into a plain-English answer to three questions:
- Who is sending email as my domain?
- Is my legitimate email passing?
- What exactly do I need to fix, and am I ready to move to
p=quarantineorp=reject?
Once you publish a DMARC record with an rua= address, Google, Microsoft, Yahoo and others send you daily .xml, .xml.gz or .zip reports. They're full of IP addresses and pass/fail codes that are hard to read. This Actor reads them for you.
What you get
- A readable HTML report (key-value store →
REPORT) with pass rate, every sending service, a verdict for each, and a prioritised to-do list. - A JSON summary (key-value store →
OUTPUT) for automations and dashboards. - Every report row in the dataset, exportable to CSV, Excel or JSON.
Sender verdicts
| Verdict | Meaning |
|---|---|
| OK | Authenticated and aligned with your domain. |
| Needs setup | A real service (SendGrid, Mailchimp, HubSpot, etc.) sending for you without DKIM/SPF set up for your domain. The report tells you which fix it needs. |
| Partly failing | Some mail passes, some fails. Worth checking. |
| Forwarded | Your mail passed through a forwarder or mailing list. Usually harmless. |
| Suspicious | Fails every check and isn't a recognised mail service. Likely spoofing. |
Senders are identified by reverse DNS and DKIM signing domain, with 35+ common services recognised by name (Google Workspace, Microsoft 365, Amazon SES, SendGrid, Mailgun, Mailchimp, Postmark, HubSpot, Salesforce, Zendesk, Klaviyo, Shopify, Zoho and more).
Input
| Field | Description |
|---|---|
| Report file URLs | Direct-download links to report files. .xml, .xml.gz and .zip (with one or many reports inside) all work. Mix reports from different providers and domains in one run. |
| Or paste report XML | Paste a single report's XML instead. |
| Identify senders | Look up who owns each sending IP (default on). |
| Save individual rows | Store every row in the dataset (default on). |
Supports both the original DMARC report format (RFC 7489) and the newer DMARCbis format.
Example output (summary)
Automate it
Schedule this Actor or call it from Make, Zapier or n8n: point a mailbox rule at the reports, save attachments to cloud storage, and pass the links in. Combine with a Slack or email integration to get a weekly "who's sending as us" digest.
Privacy & safety
Reports are processed in memory during the run and only saved to your own Apify storage. The XML parser rejects malicious files (external entities, entity-expansion and zip bombs). The Actor never contacts the sending servers; it only performs reverse-DNS lookups.
Pricing
Pay per report parsed. No subscription.
