protonvpn.com

Observed Jul 18, 2026, 12:22 UTC (18h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onProton

Email byProtonMail

Secured byLet's Encrypt

Registered withMarkMonitor Inc.

Also usesGoogle Search Console

1 subdomain · push_legacy

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat protonvpn.com actually stands on - every host below is a signed observation

protonvpn.com

A / AAAA

185.159.159.140

Protonserves the site

nora.ns.cloudflare.commitch.ns.cloudflare.com

cloudflare.comanswers its DNS

mail.protonmail.chmail.proton.ch

ProtonMailreceives its email

TLS

protonmail.com

Let's Encryptissued its certificate

DNS Records

A 1

185.159.159.140

MX 2

10mail.protonmail.ch
20mail.proton.ch

TXT 13

yandex-verification: 831cafb939d648de
swisssign-check=CF0JHMTlTDNoES3rrknIRggocffSwqmzMb9X8YbjzK
protonmail-verification=580df9ddb223b67a7aaacbe0ede4b3a0eed69cfe
google-site-verification=JSBw6W2q261qOokl2iU4gWwrTifTldZMOrA-L-0xYJA
google-site-verification=vqdgC8NAfSFpymayhvW2aoDF5u9Lz-hhuCgpYuLyEdM
google-site-verification=wc6wJiOETCLtTPf9TllNHJsAY_B6PMDilWI4qln0r88
google-site-verification=zJeaU04Nk7FDmje2PXvmbjaMR8eXtqCgRkfFi0vZcdY
ahrefs-site-verification_4bdac6bbaa81e0d591d7c0f3ef238905c0521b69bf3d74e64d3775bcb2743afd
SNAPCRAFT_IO_VERIFICATION=3c251dac89467a427e6505b905e39fd77ccc3e3c4d53caa52cc8b20952468242
brave-ledger-verification=3d2cb691b481b81ea72084c319e2636751f8f551f45e1c2548c5975bd0a745a2

NS 2

nora.ns.cloudflare.com
mitch.ns.cloudflare.com

SOA 1

mitch.ns.cloudflare.com dns.cloudflare.com

CAA 15

iodef "mailto:security@protonmail.com"
issue "comodoca.com"
issue "digicert.com; cansignhttpexchanges=yes"
issue "globalsign.com"
issue "letsencrypt.org"
issue "pki.goog; cansignhttpexchanges=yes"
issue "sectigo.com"
issue "ssl.com"
issue "swisssign.com"
issuewild "comodoca.com"

TLS Certificates (3)

Common Name	Issuer	Expires
`protonmail.com`	C=US, O=Let's Encrypt, CN=YR2	Tue, 29 Sep 2026 13:13:16 +0000
`YR2`	C=US, O=ISRG, CN=Root YR	Sat, 02 Sep 2028 23:59:59 +0000
`Root YR`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

account.protonvpn.com

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for protonvpn.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/protonvpn.com">
  <img src="https://domaindrift.io/badge/protonvpn.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for protonvpn.com">
</a>

Ed25519 Receipt

Receipt ID: f9a9b61f-c712-4af9-8571-2b927083ce58
Output Hash: c855fc6764437ad7ad04d1fb57cb92bfde8bf412c73fc6fd544c6988f72e0622
Signature: ed25519:d071819a45cf7fe5efffbba486c8ed0bb67ea4ac8b66a729101989291dbc49a5c6ca126040065d2ba1042c1fd79a3eb9d413c98e69681d5df5f54b4df6cd8205
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/protonvpn.com