Signed just now
wise.com
Psychevus attests that on 2026-11-07 19:05 UTC the public DNS of wise.com showed the records below, earning grade C.
- Grade
- C · 68/100 (1 of 3 inbox checks pass)
- DMARC
- v=DMARC1; p=reject; adkim=r; pct=100; fo=1; ri=3600; rua=mailto:bb3c5ff6@inbox.ondmarc.com; ruf=mailto:bb3c5ff6@inbox.ondmarc.com;
- SPF
- v=spf1 include:_u.wise.com._spf.smart.ondmarc.com ~all (5 of 10 lookups)
- DKIM
- google (RSA 2048-bit), k1 (RSA 1024-bit), s1 (RSA 2048-bit), s2 (RSA 1024-bit), cf2024-1 (RSA 2048-bit), mandrill (RSA 1024-bit), mailjet (RSA 1024-bit)
- MX
- aspmx.l.google.com, aspmx2.googlemail.com, aspmx3.googlemail.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
- MTA-STS
- on (enforce)
- DANE
- off
- TLS-RPT
- on
- DNSSEC
- off
- CAA
- off
- BIMI
- on
How it works
What it proves
That Psychevus read your domain’s public DNS at the stated time and saw exactly these records and this grade. It’s a statement about public facts, so no login or domain verification is needed — and it can’t be edited: the Ed25519 signature covers every character.
Who it’s for
Vendor security questionnaires that ask “do you enforce DMARC?”, cyber-insurance applications, auditors, and agencies handing a fixed domain back to a client. Send the link; they verify it in one click, or offline.
Verify it yourself
The proof is a standard JWS. Fetch the keys from /.well-known/psychevus-proof-keys.json and check it with any JOSE library, e.g. jose.compactVerify(token, key) in JavaScript, or call /api/v1/proof?token=….