Skip to content
Start with 100 free verification credits
Qualisend

DMARC reports

See who sends as your domain.

Every day, Gmail, Microsoft and Yahoo send a report of every source that sent as your domain and whether its mail passed. Raw, it's gzipped XML in a mailbox nobody opens. Add one Qualisend address to your DMARC record and those reports become pass rates, sending sources and failures per domain - with an email when new failures appear.

  • One rua= address, every domain
  • DMARC, DKIM and SPF pass rates
  • Known senders named, the rest by reverse DNS
  • From $13.99/mo

The failure you'd otherwise never see

A forgotten tool sending without DKIM, a spoofer testing your domain - both show up only in DMARC reports. We read yesterday's reports every day and email you when new failures show up.

  • Daily, not someday. Yesterday's reports are evaluated each day and you're emailed when at least 10 messages failed or a new source sent 5 or more failing messages.
  • Sources, named. Every server that sent as your domain, with its reverse-DNS name, and the name of the service behind it when it is a known sender.
  • Safe path to p=reject. Watch each legitimate source reach 100% before you tighten the policy - the way DMARC is meant to be rolled out.

Reports in two days.

One DNS change. Mailbox providers send aggregate reports once a day, so the first ones arrive within 24-48 hours of updating the record.

01

Create your report address

One click in the Monitoring section creates a report address for your workspace - one address covers every domain you send from.

Build a DMARC record
02

Add it to your DMARC record

Append it to the rua= tag of each domain's DMARC record, or publish a new record with it. Keep your existing rua= addresses; they keep receiving reports too.

How to set up DMARC
03

Read the results, not the XML

Per domain: messages, DMARC, DKIM and SPF pass rates, a daily pass/fail chart and every sending source, busiest first. Failures are highlighted.

How to read DMARC reports

What the reports tell you.

Everything in a DMARC aggregate report, laid out per domain so the next step is obvious.

Pass rates per domain

Messages reported, the share that passed DMARC, DKIM and SPF, and how many were quarantined or rejected under your policy.

Daily pass / fail chart

Messages per day (UTC) that passed or failed, so a new failure stands out as a spike and a fix shows as the line returning to zero.

Sending sources

Every server that sent as your domain, with its reverse-DNS name, the service name for known senders, message count, DMARC, DKIM and SPF results, and when it was last seen.

Daily failure alerts

An email when yesterday's reports show at least 10 failed messages or a new source with 5 or more failing messages, naming the domain and the source.

One address, every domain

A single report address per workspace. Add it to every domain's DMARC record; reports are grouped per domain automatically. Rotate the address any time.

Works with domain health

Domain health flags a DMARC record with no report address or a policy still on p=none; DMARC reports let you watch each legitimate source reach 100% before you move to quarantine and reject.

Starts at $13.99/mo.

DMARC reports is an add-on to any Qualisend account - the free tier included. Pick the pack that matches how many domains you send from.

Single

Reports for one domain.

$13.99/mo

1 domain

Start collecting reports
Best value

Multiple

Up to 10 domains.

$139/mo

10 domains

Start collecting reports

Many

Up to 50 domains.

$699/mo

50 domains

Start collecting reports

Every pack: a report address, pass rates and sources per domain, the daily chart, failure alerts. Cancel anytime.

Pair it with blacklist monitoring and domain health.

Three monitoring add-ons for the same domains, each its own monthly subscription on any plan. Switch each one on per domain from the Monitoring section of your dashboard.

From $7.99/mo

Blacklist Monitoring

Your domains and mail IPs checked every 24 hours against 40+ DNS blacklists, with an email when a listing appears and again when it clears.

See blacklist monitoring
From $8.99/mo

Domain Health Monitoring

A daily check of SPF (including the 10-lookup limit), DKIM selectors, DMARC policy, MX, MTA-STS and BIMI per domain, with an email when a record breaks and again when it's fixed.

See domain health monitoring

Related reading

Guides that go deeper on the problems this page watches for.

DMARC monitoring: what to watch after you publish a record

DMARC monitoring is the routine after the record goes live: what to watch, a weekly review, who owns it, which alerts to set and what reports cannot show.

Unknown senders in DMARC reports: how to identify them

Found an unknown IP in your DMARC report? Identify it with reverse DNS, SPF, DKIM and IP ownership, then sort it into forgotten tool, forwarder or spoofer.

Not receiving DMARC reports? A checklist to find out why

No DMARC reports in your inbox? Work through this checklist: wait time, record location, duplicate records, rua syntax, external authorisation and filters.

From p=none to p=reject: stage exit criteria for DMARC

How long to stay at p=none and when to move to quarantine and reject: exit criteria per stage, subdomain order, rollback, and what RFC 9989 changes.

DMARC fails but SPF and DKIM pass: how to find the cause

SPF and DKIM pass but DMARC fails? A decision path covering Return-Path, DKIM d= domain, strict mode, forwarding and subdomains, with the fix for each.

Best DMARC monitoring tools compared, with prices read on 2026-11-04

A dated DMARC monitoring tool comparison: criteria first, then prices read from vendor pages on 2026-11-04, free tiers, and where each tool is stronger.

Related free tools

One-off checks and record builders. No account needed.

DMARC report analyzerTurn a DMARC aggregate (rua) report into a readable source breakdown.DMARC record generatorBuild a DMARC policy record, from p=none monitoring to enforcement.Email auth checkerLook up a domain's SPF, DKIM, and DMARC records over live DNS.Domain health checkSPF, DKIM, DMARC, MX, BIMI, and MTA-STS in one live report.

DMARC reports FAQ

A daily XML file a mailbox provider sends to the address in your domain's DMARC rua= tag. It lists every source IP that sent mail claiming to be from your domain that day, how many messages, and whether each passed or failed DKIM, SPF and DMARC. Providers send one per day per domain, which is why a mailbox of them is unreadable without a tool.

One DNS record per domain. We give you a report address; you add it to the rua= tag of your DMARC record (keeping any address already there, separated by a comma), or publish a DMARC record that includes it if you have none yet. The first reports arrive within 24-48 hours.

No. One report address per workspace covers every domain you send from; reports are grouped by the domain they describe. You can rotate the address at any time - the old one stops accepting reports immediately.

Yesterday's reports (UTC) are evaluated once a day. You get an email when at least 10 messages failed DMARC, or when a sending source we hadn't seen before sent 5 or more failing messages.

No. DMARC reports, domain health monitoring and blacklist monitoring are three separate add-on subscriptions on the same list of monitored domains. You switch each one on per domain and can run any one of them alone.

The free tool reads one report file you upload, in your browser. The add-on receives every report for you, keeps them per domain, charts the daily pass/fail counts, names the sources and emails you about new failures.

Any plan, the free tier included. It's a monthly add-on priced by how many domains you collect reports for: 1 for $13.99, up to 10 for $139, up to 50 for $699. Cancel anytime.

Already have a report file?

The free DMARC report analyzer reads one aggregate report (XML, gzip or zip) in your browser, no account needed. The add-on collects every report for you, every day.

Open the free DMARC report analyzer

Read your DMARC reports without opening one.

From $13.99/mo. One rua= address for every domain, pass rates and sources per domain, a daily email when new failures appear. Cancel anytime.

Get your report address