Signed just now

mailchimp.com

Psychevus attests that on 2026-11-07 19:05 UTC the public DNS of mailchimp.com showed the records below, earning grade B.

Grade: B · 80/100 (3 of 3 inbox checks pass)
DMARC: v=DMARC1; p=reject; rua=mailto:19ezfriw@ag.dmarcian.com,mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:19ezfriw@fr.dmarcian.com,mailto:dmarc_ruf@emaildefense.proofpoint.com;
SPF: v=spf1 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.0.0/16 ip4:129.145.74.12 include:_spf.google.com include:mailsenders.netsuite.com include:_spf2.intuit.com include:_spf.qualtrics.com ip4:199.33.145.1 ip4:199.33.145.32 ip4:35.176.132.251 ip4:52.60.115.116 ~all (7 of 10 lookups)
DKIM: google (RSA 1024-bit), k1 (RSA 1024-bit), k2 (RSA 2048-bit), k3 (RSA 2048-bit), mandrill (RSA 1024-bit)
MX: mx1.intuit.iphmx.com, mx2.intuit.iphmx.com
MTA-STS: off
DANE: off
TLS-RPT: off
DNSSEC: off
CAA: on
BIMI: on

Ed25519 signature (JWS, RFC 7515 / RFC 8037) · key ed25519-XzWmcKUhkl6H1Vt6 · public keys · Public DNS over HTTPS (Cloudflare, Google), graded with the Psychevus report card.

How it works

What it proves

That Psychevus read your domain’s public DNS at the stated time and saw exactly these records and this grade. It’s a statement about public facts, so no login or domain verification is needed — and it can’t be edited: the Ed25519 signature covers every character.

Who it’s for

Vendor security questionnaires that ask “do you enforce DMARC?”, cyber-insurance applications, auditors, and agencies handing a fixed domain back to a client. Send the link; they verify it in one click, or offline.

Verify it yourself

The proof is a standard JWS. Fetch the keys from /.well-known/psychevus-proof-keys.json and check it with any JOSE library, e.g. jose.compactVerify(token, key) in JavaScript, or call /api/v1/proof?token=….