Where do these reports come from?

Mailbox providers send them daily to the rua address in your DMARC record.

Can ProbeKit collect them for me?

Yes. Accounts get a hosted rua address with dashboards and alerts.

DMARC Report Analyzer

A DMARC aggregate (rua) report is an XML file mailbox providers send daily, listing which IP addresses sent mail as your domain and whether it passed SPF and DKIM. This analyzer turns one report, as XML, .gz, or .zip, into a readable table of sources, volumes, and results.

When to use this: You received a DMARC report attachment and want to see who is sending mail as your domain. Command prefix dmarc-report:

Upload a DMARC report (.xml, .xml.gz, or .zip)

…or paste raw XML

About the DMARC Report Analyzer

Upload a DMARC aggregate report (XML, .gz or .zip) and get a readable table of sending sources, volumes and SPF/DKIM alignment results.

FAQ

Where do these reports come from?: Mailbox providers send them daily to the rua address in your DMARC record.
Can ProbeKit collect them for me?: Yes. Accounts get a hosted rua address with dashboards and alerts.