rua= — aggregate report destination

rua= lists one or more mailto: URIs that receiving mail servers send DMARC aggregate reports to, roughly daily. This tool's ingestion pipeline polls exactly that mailbox — see how reports flow from mailbox to dashboard.

If rua= points at a mailbox on a different domain than the one being monitored, that destination domain must separately authorize receiving reports for this domain via a <policy>._report._dmarc.<destination> TXT record — this is exactly what the domain page's "Cross-domain report authorization" card generates for you.