proton.me
Paid content
Multilingual
Categories: Security & Privacy
Over 100 million people use Proton to stay private and secure online. Get a free Proton account and take back your privacy.
Related questions
More questions →What is proton.me?
Does proton.me offer paid content?
What languages does proton.me support?
How can I visit proton.me?
What are some alternatives to proton.me?
Website Overview
Limited stack disclosure and few obvious backend markers suggest a more restrained public footprint. That reduces easy fingerprinting clues but is not proof of overall security. An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality.
Domain and Registration
Registered in 2010, this domain has about 15 years of history. That suggests continuity, although ownership and purpose may have changed. The registrar, MarkMonitor Inc., specializes in corporate domain and brand management, suggesting attention to domain asset protection. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain uses the common .me extension, which is not an independent safety signal.
DNS and Email
Nameservers are provided by proton.me, indicating managed DNS hosting. MX records point to the Proton Mail email service. DNSSEC is enabled, allowing validating resolvers to authenticate signed DNS data. CAA records restrict which certificate authorities are authorized to issue certificates. No CNAME was found; the observed records resolve directly to addresses.
TLS and Certificates
The certificate uses an RSA 4096-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued by Let's Encrypt, commonly associated with automated certificate services. The certificate's total validity is about 89 days, consistent with a short renewal cycle.
HTTP and Browser Security
The response lacks these common security headers: Permissions-Policy. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. No obvious internal addresses or debug information were found in the headers. Cookie security attributes are unknown. No explicit CDN or WAF marker was found in the response headers.
Technology Stack Analysis
No obvious technology stack is exposed. This may reflect restrained information disclosure, although the underlying technologies remain unknown.
Search and Social Sharing
Twitter Card metadata is configured. The page declares 27 language or regional alternatives using hreflang. The title has 26 characters, within a common display range. A meta description is present, with 123 characters. The observed directives allow indexing and link following.
Hosting and Email
Pages, Search and Sharing
| Meta description | Over 100 million people use Proton to stay private and secure online. Get a free Proton account and take back your privacy. |
|---|---|
| Canonical URL | https://proton.me |
| Language | English (default) · Multilingual |
| Twitter Card | summary_large_image |
Social Sharing Preview
14 fieldsrobots.txt (opens in a new tab)
4 rulesAll bots 3 allowed · 1 disallowed
/wallet/explorer/$/wallet/explorer/blocks/recent$/wallet/explorer/tx/recent$/wallet/explorer/
No matching rules.
Sitemaps
1
Registration details RDAP / WHOIS
| Registrar | MarkMonitor Inc. |
|---|---|
| Registered | 2010-10-10 |
| Expires | 2028-10-10 |
| Domain status | clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited、clientTransferProhibited https://icann.org/epp#clientTransferProhibited、clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited、serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited、serverTransferProhibited https://icann.org/epp#serverTransferProhibited、serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited |
| Nameservers | ns1.proton.me、ns2.proton.me、ns3.proton.me |
| DNSSEC | signed |
DNS records
| Type | Name | Value | TTL | Priority |
|---|---|---|---|---|
| A | proton.me | 185.70.42.45 | 867 | — |
| MX | proton.me | mail.protonmail.ch | 565 | 10 |
| MX | proton.me | mailsec.protonmail.ch | 565 | 20 |
| NS | proton.me | ns1.proton.me | 1111 | — |
| NS | proton.me | ns2.proton.me | 1111 | — |
| NS | proton.me | ns3.proton.me | 1111 | — |
| TXT | proton.me | google-site-verification=2FGIDo-Gf-lWE6t_gWd9gpPTehHD85hbNiEujPVgysc | 3600 | — |
| TXT | proton.me | google-site-verification=4UIZgETX8lGnv0WwpeJJbszo9daKOdXXYBKCA2XLf94 | 3600 | — |
| TXT | proton.me | google-site-verification=MUjtKY-4uQAjE92Z2-s1nm9m4mvdqY2z6HCvi_Bj4so | 3600 | — |
| TXT | proton.me | google-site-verification=QviHfE1VQ57-tDmDLxM6BQH1mdgvdQ_0QsIvCht2IaU | 3600 | — |
| TXT | proton.me | google-site-verification=_ayl1WqWIag2WkIbK4sNg_x3NCT5nYOl_DgtFPTYKeg | 3600 | — |
| TXT | proton.me | linkedin-site-verification=01e79150-bf68-4e0c-ad04-822dc1015b3b | 3600 | — |
| TXT | proton.me | protonmail-verification=5262a92f988e64f1be1362138befdf1e19d6a4c1 | 3600 | — |
| TXT | proton.me | v=spf1 include:_spf.protonmail.ch ~all | 3600 | — |
| TXT | proton.me | yandex-verification: 95a7888a0f987e6a | 3600 | — |
| TXT | proton.me | zoom-domain-verification=ZOOM_verify_5990c1fbb09d4c6aba062cded6cbdf06 | 3600 | — |
| CAA | proton.me | 0 issue "letsencrypt.org" | 1200 | — |
| CAA | proton.me | 0 issue "sectigo.com" | 1200 | — |
| DS | proton.me | 12382 8 2 0ebdded04fa7be35b5262d6b34f6a047b3105b15c2b69bc5544087d5b9d6e26b | 3121 | — |
| DMARC | _dmarc.proton.me | v=DMARC1; p=quarantine; fo=1; aspf=s; adkim=s; | 695 | — |
TLS and certificates
| Assessment | Normal configuration |
|---|---|
| Supported protocols | TLSv1.2、TLSv1.3 |
| Negotiated protocol | TLSv1.3 |
| Certificate subject | proton.me |
| Issuer | Let's Encrypt |
| Valid until | 2026-12-01T13:13 · Remaining when checked: 68 days |
| Verification details | Certificate trust: Passed · Hostname match: Passed |
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html; charset=utf-8 |
| cache-control | public, max-age=120, s-maxage=120, must-revalidate |
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
| content-security-policy | default-src 'self'; media-src https://static.zdassets.com https://res.cloudinary.com https://pmecdn.protonweb.com; connect-src 'self' wss: https://protonmail.zendesk.com https://ekr.zdassets.com blob: https://account.proton.me https://reports.proton.me https://telemetry.proton.me https://*.algolia.net https://*.algolianet.com https://go.getproton.me https://noembed.com https://boards-api.greenhouse.io https://proton.me https://*.paypal.com https://*.paypalobjects.com https://growth.proton.me ; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' https://static.zdassets.com https://pmecdn.protonweb.com https://www.youtube.com https://platform.twitter.com https://*.paypal.com https://*.paypalobjects.com; style-src 'self' 'unsafe-inline' https://pmecdn.protonweb.com https://*.paypal.com https://*.paypalobjects.com; font-src 'self' https://pmecdn.protonweb.com; img-src 'self' data: blob: https:; frame-src 'self' data: blob: https://www.youtube-nocookie.com https://platform.twitter.com https://*.paypal.com https://*.paypalobjects.com; object-src 'self' data: blob:; child-src 'self' data: blob: https://*.paypal.com https://*.paypalobjects.com; report-uri https://reports.proton.me/reports/csp; frame-ancestors 'self' https://*.proton.me; |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
| set-cookie | Redacted |
Identified technologies
Technology stack: Unknown
User reviews (0)