CONTINUOUS INTERNET TELEMETRY24H DRIFT378 material changesacross 336 domains · -280 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,365 curated domains not answering+536 vs yesterdayERRORS22,333 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED62,360 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT378 material changesacross 336 domains · -280 vs yesterdayDNS DRIFT1 domain changed DNS providertop destination selectel.ru · -1 vs yesterdayCERT DRIFT3 domains switched issuing CA24h · +1 vs yesterdayNOW3,365 curated domains not answering+536 vs yesterdayERRORS22,333 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED62,360 throttled or blocked our scanner429 rate-limit / 403 bot-block

proton.me

Observed Jul 18, 2026, 12:01 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onProton
Email byProtonMail
Secured byLet's Encrypt
Also usesGoogle Search ConsoleZoom
security
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat proton.me actually stands on - every host below is a signed observation
proton.me
A / AAAA
185.70.42.45
Protonserves the site
NS
ns1.proton.mens2.proton.mens3.proton.me
proton.meanswers its DNS
MX
mail.protonmail.chmailsec.protonmail.ch
ProtonMailreceives its email
TLS
proton.me
Let's Encryptissued its certificate

DNS Records

A 1

  • 185.70.42.45

MX 2

  • 10mail.protonmail.ch
  • 20mailsec.protonmail.ch

TXT 13

  • yandex-verification: 95a7888a0f987e6a
  • v=spf1 include:_spf.protonmail.ch ~all
  • linkedin-site-verification=01e79150-bf68-4e0c-ad04-822dc1015b3b
  • protonmail-verification=5262a92f988e64f1be1362138befdf1e19d6a4c1
  • google-site-verification=2FGIDo-Gf-lWE6t_gWd9gpPTehHD85hbNiEujPVgysc
  • google-site-verification=4UIZgETX8lGnv0WwpeJJbszo9daKOdXXYBKCA2XLf94
  • google-site-verification=MUjtKY-4uQAjE92Z2-s1nm9m4mvdqY2z6HCvi_Bj4so
  • google-site-verification=QviHfE1VQ57-tDmDLxM6BQH1mdgvdQ_0QsIvCht2IaU
  • google-site-verification=_ayl1WqWIag2WkIbK4sNg_x3NCT5nYOl_DgtFPTYKeg
  • zoom-domain-verification=ZOOM_verify_5990c1fbb09d4c6aba062cded6cbdf06

NS 3

  • ns1.proton.me
  • ns2.proton.me
  • ns3.proton.me

SOA 1

  • ns1.proton.me support.proton.me

CAA 2

  • issue "letsencrypt.org"
  • issue "sectigo.com"

TLS Certificates (3)

Common NameIssuerExpires
proton.me C=US, O=Let's Encrypt, CN=YR2 Wed, 07 Oct 2026 13:13:52 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for proton.me. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for proton.me <a href="https://domaindrift.io/t/proton.me"> <img src="https://domaindrift.io/badge/proton.me.svg" width="300" height="64" alt="DomainDrift signed observations for proton.me"> </a>

Ed25519 Receipt

Receipt ID
222faf6b-5510-445c-b91a-f7037b6a707c
Output Hash
31f08accb53b3313c412674746e65d9fc6ff58d5278bdd4e5bcf0bde878f4124
Signature
ed25519:284201e2827909ddc7836e7f4ddba7afc3b5e076265ef4a4761868273a031bf1ee9e58d82f5978e68cf77bb63d855c0d23596e5a9e4822a34ff2124844390207
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser