helm.sh

Observed Jul 24, 2026, 18:02 UTC (18h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onAmazon

Email byGoogle Workspace

Secured byLet's Encrypt

Also usesGoogle Search Console

IPv6 · push_legacy

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat helm.sh actually stands on - every host below is a signed observation

helm.sh

A / AAAA

98.84.224.11118.208.88.1572600:1f18:16e:df01::1f62600:1f18:16e:df01::1f5

Amazonserves the site

dns1.p02.nsone.netdns2.p02.nsone.netdns3.p02.nsone.netdns4.p02.nsone.net

nsone.netanswers its DNS

alt4.aspmx.l.google.comalt3.aspmx.l.google.comalt2.aspmx.l.google.comalt1.aspmx.l.google.com

Google Workspacereceives its email

TLS

helm.sh

Let's Encryptissued its certificate

DNS Records

A 2

98.84.224.111
18.208.88.157

AAAA 2

2600:1f18:16e:df01::1f6
2600:1f18:16e:df01::1f5

MX 4

10alt4.aspmx.l.google.com
10alt3.aspmx.l.google.com
5alt2.aspmx.l.google.com
5alt1.aspmx.l.google.com

TXT 1

google-site-verification=J4qTOHW5S_PjUL9KNDnvez-0mG5FGAWkkXKdlPANoZE

NS 4

dns1.p02.nsone.net
dns2.p02.nsone.net
dns3.p02.nsone.net
dns4.p02.nsone.net

SOA 1

dns1.p02.nsone.net hostmaster.nsone.net

TLS Certificates (4)

Common Name	Issuer	Expires
`helm.sh`	C=US, O=Let's Encrypt, CN=YE2	Thu, 24 Sep 2026 20:44:10 +0000
`YE2`	C=US, O=ISRG, CN=Root YE	Sat, 02 Sep 2028 23:59:59 +0000
`Root YE`	C=US, O=Internet Security Research Group, CN=ISRG Root X2	Thu, 02 Sep 2032 23:59:59 +0000
`ISRG Root X2`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for helm.sh. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/helm.sh">
  <img src="https://domaindrift.io/badge/helm.sh.svg"
       width="300" height="64" alt="DomainDrift signed observations for helm.sh">
</a>

Ed25519 Receipt

Receipt ID: rcpt_83004b66f446bf55
Output Hash: 28bdb2dfc8f7b076d26d164093e1f586f540ff689a3f32d486289842076d973d
Signature: ed25519:8210f0c558186259ddf95456605a799151d4a654c5c0324f152d3f596b22ad54496a41f8439a7e6e09639bde95c1e862161bf4a99fc86a50435c79f7d76c0601
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/helm.sh