ProtOSINT

A Python script for investigating ProtonMail accounts and ProtonVPN IP addresses.

Description

================

ProtOSINT is separated into three sub-modules:

• Test account validity: Check if an email address is valid and get additional information.
• Find target's ProtonMail account: Generate multiple email addresses by combining input fields to see if the target has a ProtonMail account.
• Check IP affiliation with ProtonVPN: Determine if your IP is currently affiliated with ProtonVPN.

Important update

=====================

As of November 7, 2021, the ProtonMail API has been updated. The API now has limitations:

• Only a few queries (ten/fifteen requests) are allowed.
• Blocking time is one hour, by IP address.
• Even if an email is not valid, the API will return a result with a random timestamp.
• However, if the email is really valid, the timestamp returned is still good.

Advice for using ProtOSINT

Use only modules 1 and 3. Before using module 1, test the validity of your email with a third-party tool or directly in the ProtonMail web interface.

Prerequisite

================

Python 3

Usage

================

python3 protosint.py

Tips for ProtonMail investigation

=====================================

• ProtonMail is case-insensitive.
• The account name in ProtonMail is case-insensitive and considers "." "_" "-" symbols as transparent. Any words after a "+" sign are not taken into account.
• Timestamp: ProtOSINT does not always give you the creation time of the ProtonMail account itself. The timestamp returned by ProtonMail API is the time and date when the primary PGP key for the email was created.

Contributing

================

Feel free to clone this project. For major changes, please open an issue first to discuss what you would like to change.

License

================

MIT

> Visit ProtOSINT Website <