Subdomain appearing outside hierarchy in Domain Overview
this is usually due to a bug in the reporting environment; Cisco IronPort (including IPHMX) is the most common example (the only one we are aware of) of this issue.
Unless the subdomain has a separate DMARC record at its own level, it should have been reported in the XML rollup for the org domain (ie www.dmarcian.com getting reported within the DMARC report for dmarcian.com). Separately reporting the subdomain is a bug which causes this change in the view on dmarcian. We intended for separately reported entries to land outside of the nesting to bring more attention to them.
If you use the 'Set domains as sub level' functionality on the Domain Overview, the current subdomains will be sorted under their org domains and new reports for those same subdomains will not cause them to reappear as top level. This will not solve the problem for subdomains you don't currently have listed though, so if you have contacts at Cisco and are interested enough, please report this to them.
Related: