http://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/support/password-reset-you-didnt-request
If this happens repeatedly, you may want to consider changing your recovery email, especially if your Proton Mail username is the same as on your recovery email. This can be guessed by random people as well as by people who may want to deliberately spam you. How to prevent unsolicited password reset emails If your recovery email is a Gmail address, you can try changing your recovery address to use a “+” alias to make it harder for an attacker to guess.