The DMARC data drawer lets you slice your data by different dimensions, helping you investigate specific aspects of your email flow.
Available views
- Sources - The sending service (e.g., Google, Mailchimp). This is the default view and the most commonly used.
- Reporters - The ISP that sent the DMARC report (e.g., google.com, outlook.com). Useful for seeing which ISPs are providing you with data.
- Envelope to - The recipient domain. Shows where your emails are being delivered.
- Visible from - The domain shown in the From header. Helps you spot alignment issues between the header and envelope.
- Return paths - The domain in the Return-Path header, which is used for SPF alignment. Useful for debugging SPF alignment failures.
- IP addresses - The sending IP addresses. Lets you identify specific servers and check if unexpected IPs are sending on your behalf.
When to use each view
Reporters is helpful when you want to understand the coverage of your DMARC reporting - which ISPs are actually sending you reports.
Return paths is the go-to view when debugging SPF alignment issues. If SPF is passing but DMARC is failing, the Return-Path domain likely doesn't match your From domain.
IP addresses is useful for identifying specific servers, especially when an unknown source is sending email as your domain and you need to track down where it's coming from.
