Signed just now

wsj.com

Psychevus attests that on 2026-11-07 19:05 UTC the public DNS of wsj.com showed the records below, earning grade C.

Grade: C · 66/100 (3 of 3 inbox checks pass)
DMARC: v=DMARC1; p=quarantine; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
SPF: v=spf1 ip4:205.203.130.22 ip4:205.203.130.101 ip4:205.203.130.102 ip4:205.203.136.101 ip4:205.203.136.102 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:96527c.workshop-spf.net ~all (2 of 10 lookups)
DKIM: google (RSA 1024-bit), selector2 (RSA 2048-bit), s1 (RSA 2048-bit), s2 (RSA 2048-bit), k2 (RSA 2048-bit), k3 (RSA 2048-bit)
MX: mxa-00596a01.gslb.pphosted.com, mxb-00596a01.gslb.pphosted.com
MTA-STS: off
DANE: off
TLS-RPT: off
DNSSEC: off
CAA: off
BIMI: off

Ed25519 signature (JWS, RFC 7515 / RFC 8037) · key ed25519-XzWmcKUhkl6H1Vt6 · public keys · Public DNS over HTTPS (Cloudflare, Google), graded with the Psychevus report card.

How it works

What it proves

That Psychevus read your domain’s public DNS at the stated time and saw exactly these records and this grade. It’s a statement about public facts, so no login or domain verification is needed — and it can’t be edited: the Ed25519 signature covers every character.

Who it’s for

Vendor security questionnaires that ask “do you enforce DMARC?”, cyber-insurance applications, auditors, and agencies handing a fixed domain back to a client. Send the link; they verify it in one click, or offline.

Verify it yourself

The proof is a standard JWS. Fetch the keys from /.well-known/psychevus-proof-keys.json and check it with any JOSE library, e.g. jose.compactVerify(token, key) in JavaScript, or call /api/v1/proof?token=….