GET https://vpn-api.proton.me/

Access:
application/vnd.protonmail.api+json;apiversion=
Cache-Control:
max-age=0, must-revalidate, no-cache, no-store, private
Content-Security-Policy:
default-src 'self'; media-src https:; connect-src https: wss:; script-src 'self' 'unsafe-eval' 'nonce-aMlknODGa5C8F82eDZGj2gAAAgA' 'strict-dynamic' https:; style-src 'self' 'unsafe-inline'; font-src 'self' https://vpn.proton.me data:; img-src http: https: data: blob: cid:; frame-src https:; report-uri https://reports.proton.me/reports/csp; frame-ancestors https://vpn.proton.me;
Content-Type:
application/json
Date:
Tue, 16 Sep 2025 13:22:36 GMT
Expect-Ct:
max-age=2592000, enforce, report-uri="https://reports.proton.me/reports/tls"
Expires:
Fri, 04 May 1984 22:15:00 GMT
Public-Key-Pins-Report-Only:
pin-sha256="CT56BhOTmj5ZIPgb/xD5mH8rY3BLo/MlhP7oPyJUEDo="; pin-sha256="35Dx28/uzN3LeltkCBQ8RHK0tlNSa2kCpCRGNp34Gxc="; report-uri="https://reports.proton.me/reports/tls"
Referrer-Policy:
strict-origin-when-cross-origin
Set-Cookie:
Session-Id=aMlknODGa5C8F82eDZGj2gAAAgA; Domain=proton.me; Path=/; HttpOnly; SameSite=None; Secure; Max-Age=7776000
Strict-Transport-Security:
max-age=31536000; includeSubDomains; preload
X-Content-Type-Options:
nosniff
X-Permitted-Cross-Domain-Policies:
none
X-Xss-Protection:
0