protonmail.com

Observed Jul 24, 2026, 02:39 UTC (7h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onProton

Email byProtonMail

Secured byLet's Encrypt

Registered withMarkMonitor Inc.

Also usesGoogle Search Console

4 subdomains · email_comms

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat protonmail.com actually stands on - every host below is a signed observation

protonmail.com

A / AAAA

185.70.42.12

Protonserves the site

ns1.protonmail.comns2.protonmail.comns3.protonmail.com

protonmail.comanswers its DNS

mail.protonmail.chmailsec.protonmail.ch

ProtonMailreceives its email

TLS

protonmail.com

Let's Encryptissued its certificate

DNS Records

A 1

185.70.42.12

MX 2

5mail.protonmail.ch
10mailsec.protonmail.ch

TXT 11

mailru-verification: 14505c6eb222c847
yandex-verification: 6059b187e78de544
v=spf1 include:_spf.protonmail.ch ~all
google-site-verification=RVUCKIFDkg-Spau8kEohQRsgyHEBUQcVehZqF6PAQcQ
google-site-verification=aq9zJnp3H3bNE0Y4D4rH5I5Dhj8VMaLYx0uQ7Rozfgg
google-site-verification=uXVNQLivTppnZssXHtMY7QVn70Mpd0x2U8pKj324Krk
ahrefs-site-verification_4bdac6bbaa81e0d591d7c0f3ef238905c0521b69bf3d74e64d3775bcb2743afd
brave-ledger-verification=66a7f27fb99949cc0c564ab98efcc58ea1bac3e97eb557c782ab2d44b49aefd7
v=DMARC1; p=quarantine; fo=1; aspf=s; adkim=s;
v=BIMI1; l=; a=;

NS 3

ns1.protonmail.com
ns2.protonmail.com
ns3.protonmail.com

SOA 1

ns1.protonmail.com support.protonmail.ch

CAA 4

iodef "mailto:security@proton.me"
issue "digicert.com"
issue "letsencrypt.org"
issue "sectigo.com"

TLS Certificates (3)

Common Name	Issuer	Expires
`protonmail.com`	C=US, O=Let's Encrypt, CN=YR2	Tue, 29 Sep 2026 13:13:16 +0000
`YR2`	C=US, O=ISRG, CN=Root YR	Sat, 02 Sep 2028 23:59:59 +0000
`Root YR`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for protonmail.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/protonmail.com">
  <img src="https://domaindrift.io/badge/protonmail.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for protonmail.com">
</a>

Ed25519 Receipt

Receipt ID: rcpt_dbd31cadce3d3e1f
Output Hash: 90b7b1841a65cb0155f6b3fca0985efb7a81ccc8a513d2343b4777faee060492
Signature: ed25519:c164d3dc4930e61ce805a6c1d398eba57e32cb512640f30f321b20f50ee133783220fc084fdf86b20531d33d8479b1c3e442f78dd273db709017571f5ff6ca05
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/protonmail.com