Signed just now
shopify.com
Psychevus attests that on 2026-11-07 19:05 UTC the public DNS of shopify.com showed the records below, earning grade B.
- Grade
- B · 76/100 (3 of 3 inbox checks pass)
- DMARC
- v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc-aggregate@shopify.com;ruf=mailto:dmarc-reports@shopify.com
- SPF
- v=spf1 include:_spf.google.com include:mail.zendesk.com include:sendgrid.net ~all (4 of 10 lookups)
- DKIM
- google (RSA 1024-bit), resend (RSA 1024-bit), mail (RSA 1024-bit), smtpapi (RSA 1024-bit)
- MX
- aspmx.l.google.com, alt3.aspmx.l.google.com, alt4.aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
- MTA-STS
- off
- DANE
- off
- TLS-RPT
- off
- DNSSEC
- off
- CAA
- off
- BIMI
- on
How it works
What it proves
That Psychevus read your domain’s public DNS at the stated time and saw exactly these records and this grade. It’s a statement about public facts, so no login or domain verification is needed — and it can’t be edited: the Ed25519 signature covers every character.
Who it’s for
Vendor security questionnaires that ask “do you enforce DMARC?”, cyber-insurance applications, auditors, and agencies handing a fixed domain back to a client. Send the link; they verify it in one click, or offline.
Verify it yourself
The proof is a standard JWS. Fetch the keys from /.well-known/psychevus-proof-keys.json and check it with any JOSE library, e.g. jose.compactVerify(token, key) in JavaScript, or call /api/v1/proof?token=….