Is mullvad.net legit?
Mullvad.net appears to be a trusted service, particularly for those seeking VPN solutions. Its long-standing domain, robust security, and transparent operational practices build significant confidence, despite a minor concern about upcoming domain expiry and payment options.
VPN & Security average: 83/100 · based on 16 sites
Checked: April 18, 2026 at 8:16 AM UTC · Refresh
Is mullvad.net a scam? Here's what we found.
The site boasts excellent security measures, including modern TLS, HSTS, and a Content Security Policy, ensuring your connection and browser interactions are well-protected against common vulnerabilities. Google Web Risk also confirms no threats.
With a 17-year-old domain, Mullvad.net has a long-established online identity. The main point of caution is the upcoming domain expiry, which should ideally be renewed much further in advance for a service of this type.
This is a high-traffic site with a significant online presence, reflecting a well-known entity in its field. It remains clean on all DNS blacklists, indicating a good standing in the online community.
Mullvad.net provides clear contact information, legal pages, and engages on social media, showcasing a commitment to openness. The mention of non-reversible payment methods is noted, as it impacts consumer recourse, though often a feature of privacy services.
The presence of comprehensive privacy and terms of service pages demonstrates a clear effort to comply with legal and ethical standards for data handling and user agreements.
The site's underlying infrastructure is solid, with proper DNSSEC, robust email authentication through SPF and DMARC, and a fast page load time, indicating a well-maintained and efficient system.
Signals Detected
This is a well-known, high-traffic website
Site uses structured data identifying itself as: Organization
Mentions non-reversible payment methods: bitcoin
This business has no Trustpilot presence — not unusual for smaller or newer companies
robots.txt has 116 directives and references a sitemap
Site has custom branding and social media metadata
Domain created 2008-07-10T20:38:28Z (17 years, 0 months ago)
Registered through Domeneshop AS dba domainnameshop.com
Expires in 83 days
DNSSEC status from WHOIS
crt.sh returned status 429
Valid certificate, expires in 71 days
Certificate issued by Let's Encrypt
Connection uses TLS 1.3
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
X-Frame-Options: SAMEORIGIN
Web server: nginx
No threats detected by Google Web Risk
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
Website links to multiple social media platforms
Not found on any DNS blacklists
Site maintains a proper sitemap with 1468 indexed pages
Resolves to: 45.83.223.209
Mail servers: aspmx.l.google.com., alt1.aspmx.l.google.com., alt2.aspmx.l.google.com., aspmx2.googlemail.com., aspmx3.googlemail.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns1.mullvaddns.net., ns2.mullvaddns.net., ns3.mullvaddns.net., ns4.mullvaddns.net.
Could not query Wayback Machine
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.