dub.sh

Observed Jul 22, 2026, 01:27 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Guarded by a firewall

Runs onAmazon

Email byGoogle Workspace

Secured byLet's Encrypt

Also usesGoogle Search Console

tranco_100k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat dub.sh actually stands on - every host below is a signed observation

dub.sh

A / AAAA

64.239.123.164.239.109.65

Amazonserves the site

ns1.vercel-dns.comns2.vercel-dns.com

vercel-dns.comanswers its DNS

aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.comalt1.aspmx.l.google.com+1 more

Google Workspacereceives its email

TLS

dub.sh

Let's Encryptissued its certificate

DNS Records

A 2

64.239.123.1
64.239.109.65

MX 5

1aspmx.l.google.com
10alt3.aspmx.l.google.com
10alt4.aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com

TXT 3

google-site-verification=7RJoMZXEQl92PwSAyzGYSnXVWc21aqcTPXUwkxO6eTI
v=DMARC1; p=none; pct=100; rua=mailto:re+jnb3immksnj@dmarc.postmarkapp.com; sp=none; aspf=r;
v=DMARC1; p=quarantine; pct=20; rua=mailto:dmarcreports@dub.co

NS 2

ns1.vercel-dns.com
ns2.vercel-dns.com

SOA 1

ns1.vercel-dns.com hostmaster.nsone.net

CAA 3

issue "letsencrypt.org"
issue "pki.goog"
issue "sectigo.com"

TLS Certificates (3)

Common Name	Issuer	Expires
`dub.sh`	C=US, O=Let's Encrypt, CN=YR2	Sun, 18 Oct 2026 21:33:38 +0000
`YR2`	C=US, O=ISRG, CN=Root YR	Sat, 02 Sep 2028 23:59:59 +0000
`Root YR`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for dub.sh. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/dub.sh">
  <img src="https://domaindrift.io/badge/dub.sh.svg"
       width="300" height="64" alt="DomainDrift signed observations for dub.sh">
</a>

Ed25519 Receipt

Receipt ID: rcpt_476ce34b17e4ecc5
Output Hash: ffa2f792a30dda0d5ce0e8877ddcda08fb52360a6cedd4038960d261a2e1d2af
Signature: ed25519:6308fa0fd62fe2f17937432c8309c00105b53a8845daadf5184766c710e8f850e5c8288f95f6e833785b127cbd5118b2269b8aad550f0a64aa9b08cf3b9df20b
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/dub.sh