If you've ever set up DMARC on a domain, you've probably noticed the daily emails from Google and Microsoft with .zip attachments. Inside is XML full of IP addresses and pass/fail codes. Almost nobody reads them, which is a shame, because they're the main way to find out who is actually sending email using your domain.
I'm an infrastructure engineer and kept seeing people struggle to read these, so I built DMARC Report Reader.
What it does
You give it report files (.xml, .gz or .zip, from any provider) and it gives you back one page showing:
- Who is sending as you, with each IP named as a service: Google Workspace, Microsoft 365, SendGrid, Mailchimp and 35+ others
- A verdict for each sender: OK, Needs setup, Forwarded or Suspicious
- The exact fix, e.g. "set up DKIM for your domain in SendGrid"
- When it's safe to tighten your policy from p=none to quarantine or reject without blocking your own mail
On a sample report it flagged a Tor exit node impersonating the domain and a SendGrid account that was sending without DKIM, neither of which you'd spot in the raw XML.
How it's built
- Python on Apify, so there's no server for me to run, and it plugs into Make, Zapier or n8n for automatic weekly reports
- Hardened XML parsing, since these files come from outside (it rejects XXE, entity-expansion and zip-bomb tricks)
- Senders identified from reverse DNS plus the DKIM signing domain
- Pay per use: 3 cents per report, no subscription. Most DMARC tools charge $20+ a month, which is overkill for a small business with one or two domains.
Try it: https://apify.com/sky_technologies/dmarc-report-reader
It's part of a small set of email-security tools I'm building alongside my domain health checker; a blocklist checker is next. I'd really like feedback:
- If you manage domains, what would make you use this regularly?
- Is per-report pricing appealing, or would you rather pay a flat monthly fee?
Source: r/SideProject · by /u/jsandhu0780