DMARC RUA XML Parser
Parse DMARC aggregate RUA XML reports into readable summaries: top sending IPs, pass/fail, alignment, and disposition.
Last reviewed by the Radiatus Cloud team
Top Sending IPs
| Source IP | Msgs | Pass | Fail | Align |
|---|
Need this handled by experts?
Radiatus runs VAPT, managed SOC & security engineering for regulated teams.
Make sense of DMARC reports
DMARC aggregate reports arrive as dense XML that is unreadable by eye, yet they contain vital information about who is sending mail as your domain. This parser turns DMARC RUA XML reports into readable summaries, showing the top sending IPs and their authentication pass and fail results.
Why these reports matter
DMARC tells receiving mail servers what to do with mail that fails authentication, and the aggregate reports tell you who is sending mail claiming to be from your domain, both your legitimate senders and any spoofers. Read as raw XML they are impenetrable; summarised, they reveal whether your own mail is passing authentication and whether anyone is impersonating your domain. That visibility is the whole point of DMARC reporting, and it is how you tune your setup and detect abuse. Parsing them locally keeps the reports, which name your infrastructure, private.
Reports you can actually read
The tool runs entirely in your browser, so nothing you paste is uploaded, which is exactly what you want when the input is your own security-sensitive data.
Related tools
- Password Strength Checker — Measure password strength by entropy and pattern analysis rather than character-class rules. Checked entirely in your browser.
- Password Generator — Generate strong random passwords and passphrases in your browser using the Web Crypto API. Nothing is transmitted, logged or stored.
- Hash Generator — Generate MD5, SHA-1, SHA-256 and SHA-512 hashes in your browser. Compare checksums and verify file integrity with nothing uploaded to a server.
- Base64 Encoder/Decoder — Encode and decode Base64 in your browser, including URL-safe Base64 and UTF-8 text. Handles files and data URIs locally with nothing uploaded.
Frequently Asked Questions
What is a DMARC aggregate report?
An XML report from receiving mail servers showing who sent mail claiming to be from your domain and whether it passed SPF and DKIM authentication.
Why parse these reports?
Because the raw XML is unreadable, while a summary reveals whether your legitimate mail is authenticating and whether anyone is spoofing your domain.
What does the summary show?
The top sending IP addresses and their authentication pass and fail results, so you can see both your senders and potential impersonators.
How does this help security?
It reveals spoofing of your domain and misconfigured legitimate senders, letting you tune DMARC and detect abuse.
Are my reports uploaded?
No. The parsing runs in your browser, keeping reports that name your infrastructure private.
Privacy & Security
Reports are processed locally in your browser. Nothing is uploaded.
How to Use
Upload one or more DMARC aggregate XML files and review the summary.
Disclaimer: This tool is provided "as is" without warranty of any kind. Results are for educational and utility purposes.
Related Tools
Password Strength Checker
SecurityMeasure password strength by entropy and pattern analysis rather than character-class rules. Checked entirely in your browser.
Password Generator
SecurityGenerate strong random passwords and passphrases in your browser using the Web Crypto API. Nothing is transmitted, logged or stored.
Hash Generator
SecurityGenerate MD5, SHA-1, SHA-256 and SHA-512 hashes in your browser. Compare checksums and verify file integrity with nothing uploaded to a server.