2 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
DMARC ruf= tag for a domain: forensic report addresses. Reads _dmarc.<domain> (Cloudflare DoH), parses the record and returns the ruf value (or that it is absent, with the default that then applies) plus the full record....
Change watch for dmarc tag ruf: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with befo...