DMARC XML-to-Human Converter
Paste or upload a DMARC aggregate report (XML, .gz or .zip) and read it as a human — sources identified by name, alignment explained.
Turn on DMARC reporting and your inbox fills with cryptic attachments: files named google.com!yourdomain.dk!1751500800!1751587200.xml.gz containing machine-readable XML that no human enjoys. Each one is a receiver — Google, Microsoft, Yahoo and thousands of smaller ones — telling you exactly who sent email claiming your domain in the last 24 hours, and whether it authenticated.
This converter does what the format should have done from the start. Upload the attachment as-is (we handle gzip and zip transparently) or paste the raw XML. You get the report metadata — who reported, which period, which policy applied — and one row per sending source: the IP, how many messages, the SPF and DKIM outcomes, and the final DMARC verdict with the disposition the receiver applied.
Two things set this converter apart. First, source identification: we match each IP against our directory of 100+ known sending services, so the table says "Mailchimp" and "Microsoft 365" instead of bare addresses — the single biggest time-saver when triaging a report. Second, honest alignment: the pass/fail columns show the policy-evaluated (aligned) results that actually decide DMARC, not the raw authentication results that often mislead beginners into thinking a failing source passes.
Nothing you upload is stored — the report is parsed in memory and discarded. If reading reports one file at a time gets old (it does, around day three), the monitored version of this exact view is what MonitorBase's paid plans do continuously: reports flow to a private ingest address, get parsed and identified automatically, and you look at trends and alerts instead of attachments.