ProtonVPN Detection Report

The detection engine correctly identified ProtonVPN as an active VPN session.

Classification VPN

Engine Verdict High Confidence

Region Observed Secure Core · Zurich

Provider Overview

ProtonVPN, created by the team behind ProtonMail, focuses on security and privacy. It offers a free tier, Tor over VPN functionality, and is based in Switzerland, known for its strong privacy laws.

Detection Notes

Secure Core traffic introduced deterministic latency spikes from Icelandic entry nodes.
Tunneled DNS queries routed through Proton-operated resolvers with DNSSEC signatures enabled by default.
Client fingerprint leveraged OpenVPN with custom TLS ciphersuites unique to ProtonVPN builds.

ProtonVPN detection screenshot — Live capture of the detection engine highlighting the ProtonVPN session.

Start Free Trial