Signed just now

cloudflare.com

Psychevus attests that on 2026-11-07 19:05 UTC the public DNS of cloudflare.com showed the records below, earning grade A.

Grade: A · 94/100 (3 of 3 inbox checks pass)
DMARC: v=DMARC1; p=reject; sp=reject; adkim=r; aspf=r; pct=100; rua=mailto:a1c47f179bc04efd8ee4dcd4d85dfc65@dmarc-reports.cloudflare.net,mailto:rua@cloudflare.com
SPF: v=spf1 ip4:199.15.212.0/22 ip4:173.245.48.0/20 include:_spf.google.com include:spf1.mcsv.net include:spf.mandrillapp.com include:mail.zendesk.com include:stspg-customer.com include:_spf.salesforce.com -all (7 of 10 lookups)
DKIM: k1 (RSA 1024-bit), s1 (RSA 2048-bit), smtpapi (RSA 1024-bit), mandrill (RSA 1024-bit)
MX: mxa-canary.global.inbound.cf-emailsecurity.net, mxb-canary.global.inbound.cf-emailsecurity.net, mxa.global.inbound.cf-emailsecurity.net, mxb.global.inbound.cf-emailsecurity.net
MTA-STS: off
DANE: on
TLS-RPT: on
DNSSEC: on
CAA: on
BIMI: off

Ed25519 signature (JWS, RFC 7515 / RFC 8037) · key ed25519-XzWmcKUhkl6H1Vt6 · public keys · Public DNS over HTTPS (Cloudflare, Google), graded with the Psychevus report card.

How it works

What it proves

That Psychevus read your domain’s public DNS at the stated time and saw exactly these records and this grade. It’s a statement about public facts, so no login or domain verification is needed — and it can’t be edited: the Ed25519 signature covers every character.

Who it’s for

Vendor security questionnaires that ask “do you enforce DMARC?”, cyber-insurance applications, auditors, and agencies handing a fixed domain back to a client. Send the link; they verify it in one click, or offline.

Verify it yourself

The proof is a standard JWS. Fetch the keys from /.well-known/psychevus-proof-keys.json and check it with any JOSE library, e.g. jose.compactVerify(token, key) in JavaScript, or call /api/v1/proof?token=….