This tool reads DMARC aggregate reports. It does not check blocklists, query DNS, send email, or diagnose deliverability. It presents what the receiving servers recorded — nothing more.
What the results mean. Dmarcread groups sources by what the receiving servers recorded. A source listed as "unidentified" means the report did not contain SPF or DKIM identities that align with your domain — it may be spoofing, or a legitimate sender whose authentication records were never configured. This tool cannot distinguish between the two. Source reputation, content filtering, and blocklist status are outside the scope of a DMARC aggregate report.