cerbos.dev

Observed Jul 18, 2026, 12:24 UTC (17h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Email byGoogle Workspace

Secured byLet's Encrypt

Registered withSquarespace Domains II LLC.

Also usesHubSpot

push_legacy

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat cerbos.dev actually stands on - every host below is a signed observation

cerbos.dev

A / AAAA

76.76.21.21

unattributedserves the site

ns-cloud-d1.googledomains.comns-cloud-d2.googledomains.comns-cloud-d3.googledomains.comns-cloud-d4.googledomains.com

googledomains.comanswers its DNS

aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

cerbos.dev

Let's Encryptissued its certificate

DNS Records

A 1

76.76.21.21

MX 5

1aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com
10alt3.aspmx.l.google.com
10alt4.aspmx.l.google.com

TXT 2

v=spf1 include:20289770.spf10.hubspotemail.net include:_spf.google.com include:spf.zoho.com include:transmail.net -all
v=DMARC1;p=reject;pct=100;rua=mailto:dmarc@cerbos.dev;ruf=mailto:dmarc@cerbos.dev

NS 4

ns-cloud-d1.googledomains.com
ns-cloud-d2.googledomains.com
ns-cloud-d3.googledomains.com
ns-cloud-d4.googledomains.com

SOA 1

ns-cloud-d1.googledomains.com cloud-dns-hostmaster.google.com

TLS Certificates (3)

Common Name	Issuer	Expires
`cerbos.dev`	C=US, O=Let's Encrypt, CN=YR1	Mon, 14 Sep 2026 05:36:58 +0000
`YR1`	C=US, O=ISRG, CN=Root YR	Sat, 02 Sep 2028 23:59:59 +0000
`Root YR`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cerbos.dev. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/cerbos.dev">
  <img src="https://domaindrift.io/badge/cerbos.dev.svg"
       width="300" height="64" alt="DomainDrift signed observations for cerbos.dev">
</a>

Ed25519 Receipt

Receipt ID: 240ae7da-0a44-4042-99a3-7b4329cd5555
Output Hash: c346834719d2647ed283d04ea5bcaa7e576132518e5c7a6005b502d19e713ba1
Signature: ed25519:d608183f0122b59623cf2c9585a7bace8194a58aeaaedd91c660c7a3c84fe36b45d1913286f20e9806b821218ad991a6f1151373126ae534867e4fc877411e01
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/cerbos.dev