ic3.dev
Monitoring only
Cloudflare Proton Mail
DNS, hosting, email and name analysis are live. Registration data, the home-page probe, the archive lookup and the other-TLD check are being fetched in the background; this page refreshes itself in a few seconds.
Registration
Fetching the registry record…
DNS
| Type | Value |
|---|---|
| NS | meg.ns.cloudflare.com · nico.ns.cloudflare.com |
| A | 104.21.52.35 |
| A | 172.67.194.200 |
| AAAA | 2606:4700:3034::ac43:c2c8 |
| AAAA | 2606:4700:3037::6815:3423 |
| MX | 10 mail.protonmail.ch |
| MX | 20 mailsec.protonmail.ch |
| TXT | protonmail-verification=acf916fcc9321bba034f2de67543896fbd051ac7 |
| TXT | v=spf1 include:_spf.protonmail.ch mx ~all |
| SOA | meg.ns.cloudflare.com dns.cloudflare.com serial 2417411774 |
Certificates
- First certificate seen
- 2026-10-13 21:06 UTC since dot.bi started watching
- Last certificate seen
- 2026-10-13 21:06 UTC
- Certificates observed
- 4
- Issuers
- Google Trust Services
Hosting
- IP
- 104.21.52.35
- Network
- AS13335 · CLOUDFLARENET - Cloudflare, Inc., US
- Provider
- Cloudflare
- Country
- US (network registration, not server location)
- CDN
- none detected
- IPv6
- yes
Web
Probing the home page…
Monitoring only DMARC is set to p=none: spoofed mail is reported but still delivered.
- Provider
- Proton Mail
- SPF
- present all: softfail
- DMARC
- p=none no reports
- DKIM
- found selector: protonmail
Age
- First capture
- looking up…
- Years archived
- —
- Registry created
- —
- In dot.bi since
- 2026-10-13 · Certificate Transparency
Name analysis
Same name, other TLDs
Checking the same name on other TLDs…
History observed by dot.bi
First observed by dot.bi · source: ct