If you turned on DMARC, mail providers now send you daily "aggregate report" attachments full of unreadable XML. Paste one below and get a clear read: how many messages were sent as your domain, how many failed authentication, and which servers are sending as you. Free, no login.
Reports arrive as a .zip (Google) or .gz (Microsoft) attachment. Unzip it and paste the .xml inside. We parse it in the moment and show you the result. We do not store it.
Every source IP that sent mail using your domain in the From address, and how many messages each sent. Your own mail servers and tools should be here. Anything you do not recognize is worth a look.
For each source, whether the mail passed DMARC (aligned SPF or DKIM). Failing mail sent as you is either a tool you have not set up correctly, or someone spoofing your domain.
Fix or authenticate the sources you own. If an unknown source is failing in volume, that is the case for keeping your DMARC policy at quarantine or reject so those messages do not reach inboxes.
The XML you paste is sent to our server only to parse it, and the result is returned to you. We do not store the report or the IP addresses in it. If you would rather not, you can read the fields yourself: source_ip, count, and policy_evaluated (dkim/spf) are the ones that matter.
Maybe, or it may be a legitimate tool (a CRM, a newsletter, a support desk) that you never set up SPF or DKIM for. Check whether you recognize the IP or its hostname. If you do not, and it is sending real volume, that is exactly what a DMARC policy of quarantine or reject is for.
That is what we are building: point your DMARC reports at us once, and we email you the moment a new unauthenticated sender appears, instead of you reading XML every day. Add your email below to be told when it is ready.
Reading one report is a snapshot. The value is over time: knowing the hour a new server starts sending as you. We are building a watch that does exactly that from your DMARC reports. Want it? We will email you once when it is live.
One email when it launches. No spam, no card.