Threat Actor: ProtonMail | ProtonMail
Victim: Users of ProtonMail | Users of ProtonMail
Price: Free
Exfiltrated Data Type: Email address validity, creation date, public key
Key Points :
- ProtonMail provides an API to verify email addresses and retrieve their creation dates.
- Users can convert Unix timestamps into standard date formats using online converters.
- The public key associated with an email address can be retrieved for secure communications.
- This method enhances security by confirming email legitimacy and facilitating encrypted messaging.
- Useful for security professionals, journalists, and privacy-conscious individuals.
If you’re working with ProtonMail and need to verify the existence of an email address, obtain its creation date, or access the associated public key, there’s a straightforward method available using ProtonMail’s API. Here’s how you can do it.
Step 1: Check if a ProtonMail Address is Valid and Get Its Creation Date
To check whether a ProtonMail address is valid and discover when it was created, you can use ProtonMail’s public key server API. Simply access the following URL, replacing “[email protected]” with the email address you want to check:
https://api.protonmail.ch/pks/lookup?op=index&[email protected]
When you visit this link, you’ll receive a response that includes a timestamp showing when the email address was created. This is a useful feature if you’re trying to verify the legitimacy of an account or understand its history.
Step 2: Convert the Timestamp
The creation date is provided in Unix timestamp format, which might not be immediately readable. To convert this timestamp into a standard date and time, you can use any online Unix timestamp converter. Simply copy the timestamp from the API response, paste it into the converter, and you’ll instantly see the creation date and time in a more familiar format.
Step 3: Retrieve the Public Key Associated with the Email
If you need to obtain the public key attached to a ProtonMail address, you can do so by slightly modifying the URL. Replace “index” with “get” in the link, like so:
https://api.protonmail.ch/pks/lookup?op=get&[email protected]
This will return the public key associated with the email address. Having access to the public key is crucial for sending encrypted messages securely, as it allows you to encrypt data that only the intended recipient can decrypt.
Why This is Useful
This method of verification is particularly useful in a variety of scenarios. For instance, if you’re conducting due diligence on a contact, checking for potential phishing attempts, or managing secure communications, knowing the creation date and having the public key can provide additional layers of security and trust.
Using ProtonMail’s API is a powerful way to:
- Confirm if a ProtonMail address exists.
- Find out when the email address was created.
- Access the public key for secure communications.
Whether you’re a security professional, a journalist, or just someone who values privacy, these tools can help you manage your ProtonMail communications with greater confidence.