Reports / proton.me
proton.me
We found 78 subdomains of proton.me in certificate transparency logs, passive DNS and DNS brute force; 52 resolve right now, including account.proton.me, status.proton.me and cdn.proton.me. proton.me is registered with MarkMonitor Inc. since 2010-10-10 and expires 2028-10-10. Its SSL certificate from Let's Encrypt expires in 54 days. For email it has an SPF record, DMARC set to quarantine and no DKIM key on the common selectors we check.
- Registration
- MarkMonitor Inc.Since 2010-10-10 · expires 2028-10-10
- SSL certificate
- 54 days leftLet's Encrypt
- Subdomains
- 52 live78 discovered in total
- Email authentication
- SPF + DMARC onlyDMARC policy: quarantine
DNS records
6 of 7 types| A1 |
|
| AAAA | No AAAA records |
| MX2 |
|
| TXT10 |
Show all 10
|
| NS3 |
|
| CAA2 |
|
| SOA1 |
|
Live lookup, cached up to 5 min.
WHOIS / RDAP
via port43:whois.nic.me- Registrar
- MarkMonitor Inc.
- Registered
- 2010-10-10
- Expires
- 2028-10-10
- Last updated
- 2026-09-13
- Registry handle
- REDACTED
- Nameservers
- ns1.proton.mens2.proton.mens3.proton.me
- Status
- clientDeleteProhibitedserverDeleteProhibitedclientTransferProhibitedserverTransferProhibitedclientUpdateProhibitedserverUpdateProhibited
RDAP with port-43 WHOIS fallback, cached up to 1 h.
SSL certificate
Valid, 54 days left- Issuer
- Let's EncryptCN=YR2,O=Let's Encrypt,C=US
- Subject
- proton.me
- Valid from
- 2026-09-02 13:13 UTC
- Valid until
- 2026-12-01 13:13 UTC
- Serial number
- 541647849722819850903608082500830654292450
- Names covered (5)
- *.pr.tn*.proton.me*.storage.proton.mepr.tnproton.me
Live TLS handshake on port 443, cached up to 6 h.
Subdomains
52 live · 78 discovered- account-api.proton.me185.70.42.20
- account.proton.me185.70.42.36
- ap.proton.me185.70.42.61
- authenticator-api.proton.me185.70.42.22
- authenticator.proton.me185.70.42.72
- autoconfig.proton.me185.70.42.15
- autofill.reports.proton.me54.73.19.57
- calendar-api.proton.me185.70.42.41
- calendar.proton.me185.70.42.39
- careers.proton.me185.70.42.45
- cdn.proton.me185.70.42.45
- docs-editor.proton.me185.70.42.70
- docs-rts.proton.me185.70.42.71
- drive-api.proton.me185.70.42.43
- drive.proton.me185.70.42.40
- fra-storage.proton.me185.205.70.10
- get.proton.me185.70.42.17
- growth.proton.me185.70.42.159
- localize.proton.me184.104.178.43
- loki-tpe.proton.me185.70.42.65
- lumo-api.proton.me185.70.42.54
- lumo.proton.me185.70.42.51
- meet-api.proton.me185.70.42.119
- meet-mls.proton.me185.70.42.112
- mmp-api.proton.me185.70.42.41
- mt.proton.me185.70.42.173
- mta-sts.proton.me185.70.42.41
- new-calendar.proton.me185.70.42.39
- ns1.proton.me185.70.42.150
- ns2.proton.me176.119.200.150
- ns3.proton.me205.132.47.1
- openpgpkey.proton.me185.70.42.41
- partners-api.proton.me185.70.42.171
- partners.proton.me100.62.247.244
- pass.proton.me185.70.42.63
- proton.me185.70.42.45
- rust-registry.proton.meprotonprivacy.github.io
- scim.proton.me185.70.42.20
- sheets.proton.me185.70.42.69
- shop.proton.me23.227.38.74
- spaces.proton.me185.70.42.116
- status.proton.me3.167.37.100
- telemetry.proton.me185.70.42.172
- verify-api.proton.me185.70.42.20
- verify.proton.me185.70.42.52
- vip-fr3-storage.proton.me185.205.70.10
- vpn-api.proton.me185.159.159.148
- vpn.proton.me185.70.42.45
- wallet-api.proton.me194.0.147.11
- wallet.proton.me194.0.147.12
- www.proton.me185.70.42.45
- zrh-storage.proton.me176.119.200.8
No subdomains found.
26 more seen in CT logs and passive DNS that don't resolve now
- 45.77.142.30.proton.me
- alias.proton.me
- api.proton.me
- app.proton.me
- contacts.proton.me
- docs.proton.me
- drivo.proton.me
- dummy.proton.me
- kryvex.proton.me
- livekit.proton.me
- m.proton.me
- mail-api.proton.me
- mail.proton.me
- meet.proton.me
- neutron-api.proton.me
- neutron.proton.me
- orders.proton.me
- pass-api.proton.me
- repo.proton.me
- reports.proton.me
- sso.proton.me
- storage.proton.me
- test-storage.proton.me
- vip-zh5-storage.proton.me
- www.careers.proton.me
- zentimings.proton.me
Shared infrastructure, collapsed:
Sources: rapiddns 14 · dns-brute 2 · certspotter 9 · crt.sh 2 · virustotal 73 · subfinder 3
From CT logs, passive DNS (25+ sources) and brute-force. Live means it resolves now.
Email security
SPF Present
v=spf1 include:_spf.protonmail.ch ~all
DMARC Present
p=quarantine
v=DMARC1; p=quarantine; fo=1; aspf=s; adkim=s;
DKIM None found
No key on the common selectors.
DKIM checked on 29 common selectors; custom ones can't be discovered. Cached up to 1 h.
Got an email from proton.me asking you to change bank details? Check it before you pay
Get this report as JSON
One call returns everything on this page. Each section is also its own endpoint.
curl "https://domain-intelligence-api.p.rapidapi.com/lookup/proton.me" \
-H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
-H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"
import requests
r = requests.get(
"https://domain-intelligence-api.p.rapidapi.com/lookup/proton.me",
headers={
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
},
timeout=30,
)
print(r.json())
// Node 18+ (built-in fetch)
const res = await fetch(
"https://domain-intelligence-api.p.rapidapi.com/lookup/proton.me",
{ headers: {
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
} }
);
console.log(await res.json());
<?php
$ch = curl_init("https://domain-intelligence-api.p.rapidapi.com/lookup/proton.me");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
"X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key: YOUR_RAPIDAPI_KEY",
]);
$data = json_decode(curl_exec($ch), true);
print_r($data);
1,000 requests a month free, no card
Paid plans up to 5M a month
?wait=1 waits for every subdomain source to finish