dub.sh

Observed Jul 24, 2026, 03:42 UTC (57m ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Guarded by a firewall

Runs onAmazon

Email byGoogle Workspace

Secured byLet's Encrypt

Also usesGoogle Search Console

tranco_100k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat dub.sh actually stands on - every host below is a signed observation

dub.sh

A / AAAA

64.239.109.6564.239.109.1

Amazonserves the site

ns1.vercel-dns.comns2.vercel-dns.com

vercel-dns.comanswers its DNS

aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

dub.sh

Let's Encryptissued its certificate

DNS Records

A 2

64.239.109.65
64.239.109.1

MX 5

1aspmx.l.google.com
10alt3.aspmx.l.google.com
10alt4.aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com

TXT 3

google-site-verification=7RJoMZXEQl92PwSAyzGYSnXVWc21aqcTPXUwkxO6eTI
v=DMARC1; p=none; pct=100; rua=mailto:re+jnb3immksnj@dmarc.postmarkapp.com; sp=none; aspf=r;
v=DMARC1; p=quarantine; pct=20; rua=mailto:dmarcreports@dub.co

NS 2

ns1.vercel-dns.com
ns2.vercel-dns.com

SOA 1

ns1.vercel-dns.com hostmaster.nsone.net

CAA 3

issue "letsencrypt.org"
issue "pki.goog"
issue "sectigo.com"

TLS Certificates (3)

Common Name	Issuer	Expires
`dub.sh`	C=US, O=Let's Encrypt, CN=YR2	Sun, 18 Oct 2026 21:33:38 +0000
`YR2`	C=US, O=ISRG, CN=Root YR	Sat, 02 Sep 2028 23:59:59 +0000
`Root YR`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for dub.sh. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/dub.sh">
  <img src="https://domaindrift.io/badge/dub.sh.svg"
       width="300" height="64" alt="DomainDrift signed observations for dub.sh">
</a>

Ed25519 Receipt

Receipt ID: rcpt_f0cf1ec85c97bd21
Output Hash: 7bf56290ef1149067b7b71555ce631dae9b39054e257ec57087dc316ffd82da1
Signature: ed25519:4bf8308ff4f6d258f8c963b371b3f48bc33dcdfea0ade3d64a8a82a90828e1c5502d1bc7dbc1794dffec893893877aa967b471e7d102831c0d2243be2832a805
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/dub.sh