DMARC test failed but we didn't find any obvious reason why; DMARC not passing while SPF and DKIM do

Solution 1:

As we can read from the results:

  • SPF verification passes, and the domain used in envelope sender matches the From header.
  • DKIM verification passes with a matching d=.

This means you have a passing DMARC alignment from both, while only one is required. Based on that we can blame mail-tester.com for analysing it incorrectly.