Signed just now

ikea.com

Psychevus attests that on 2026-11-07 19:05 UTC the public DNS of ikea.com showed the records below, earning grade A.

Grade: A · 100/100 (3 of 3 inbox checks pass)
DMARC: v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@ikea.com; ruf=mailto:dmarc_ruf@ikea.com
SPF: v=spf1 include:_spf.ikea.com include:spf.protection.outlook.com -all (2 of 10 lookups)
DKIM: selector1 (RSA 2048-bit), selector2 (RSA 2048-bit)
MX: ikea-com.i-v1.mx.microsoft
MTA-STS: on (testing)
DANE: on
TLS-RPT: on
DNSSEC: on
CAA: on
BIMI: on

Ed25519 signature (JWS, RFC 7515 / RFC 8037) · key ed25519-XzWmcKUhkl6H1Vt6 · public keys · Public DNS over HTTPS (Cloudflare, Google), graded with the Psychevus report card.

How it works

What it proves

That Psychevus read your domain’s public DNS at the stated time and saw exactly these records and this grade. It’s a statement about public facts, so no login or domain verification is needed — and it can’t be edited: the Ed25519 signature covers every character.

Who it’s for

Vendor security questionnaires that ask “do you enforce DMARC?”, cyber-insurance applications, auditors, and agencies handing a fixed domain back to a client. Send the link; they verify it in one click, or offline.

Verify it yourself

The proof is a standard JWS. Fetch the keys from /.well-known/psychevus-proof-keys.json and check it with any JOSE library, e.g. jose.compactVerify(token, key) in JavaScript, or call /api/v1/proof?token=….