2 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
DMARC rua= tag for a domain: aggregate report addresses. Reads _dmarc.<domain> (Cloudflare DoH), parses the record and returns the rua value (or that it is absent, with the default that then applies) plus the full record...
Change watch for dmarc tag rua: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with befo...