Is surfshark.com legit?

92
/ 100
Trusted
Industry: VPN & Security

This website is trusted and appears to be a legitimate online presence. It demonstrates excellent foundational trust signals, with only minor technical concerns related to external scripts and an unsigned DNSSEC record.

VPN & Security average: 84/100 · based on 16 sites

Checked: April 27, 2026 at 8:13 AM UTC

Is surfshark.com a scam? Here's what we found.

Security 90/100

The site uses modern TLS 1.3 with a valid certificate from Google Trust Services and is clean according to Google Web Risk, showing a strong security posture. However, the high number of external scripts presents a minor potential vulnerability point to monitor.

Identity 95/100

Surfshark.com has been established for over 18 years, indicating a long-standing and stable presence. The domain's details are transparently registered and its expiry date is far in the future.

Reputation 95/100

The domain boasts a high Tranco rank, indicating significant traffic and recognition, and is not found on any DNS blacklists. While Trustpilot and Web Archive data were unavailable, the overall signals point to a solid reputation.

Transparency 95/100

The website provides clear contact information, maintains custom branding, and has a strong presence across multiple social media platforms, indicating open communication with its users.

Compliance 95/100

The site includes essential legal pages like a privacy policy and terms of service, which are crucial for user trust and regulatory compliance.

Infrastructure 90/100

The site has well-configured DNS, robust email authentication with DMARC, and fast page load times, leveraging Cloudflare for its infrastructure. The lack of DNSSEC is a minor oversight but does not detract significantly from an otherwise strong setup.

Signals Detected

[+]
Tranco Rank: Rank #3839

This is a well-known, high-traffic website

[+]
Structured Data: Found

Site uses structured data identifying itself as: Organization

[~]
External Scripts: 21 scripts

Excessive number of external scripts — may indicate malicious injection

[+]
Domain Age: 18 years, 10 months

Domain created 2007-09-30T09:00:38Z (18 years, 10 months ago)

[?]
Registrar: TurnCommerce, Inc. DBA NameBright.com

Registered through TurnCommerce, Inc. DBA NameBright.com

[+]
Domain Expiry: 2031-09-30T09:00:38Z

Expires in 1982 days

[+]
DNSSEC: unsigned

DNSSEC status from WHOIS

[+]
SSL Certificate: Valid

Valid certificate, expires in 54 days

[?]
Certificate Issuer: Google Trust Services

Certificate issued by Google Trust Services

[+]
TLS Version: TLS 1.3

Connection uses TLS 1.3

[?]
Trustpilot: No Trustpilot profile

This business has no Trustpilot presence — not unusual for smaller or newer companies

[+]
DNS Resolution: 4 IP(s)

Resolves to: 2606:4700::6812:7822, 2606:4700::6812:7922, 104.18.121.34, 104.18.120.34

[+]
Email (MX Records): 5 record(s)

Mail servers: aspmx.l.google.com., alt1.aspmx.l.google.com., alt2.aspmx.l.google.com., alt3.aspmx.l.google.com., alt4.aspmx.l.google.com.

[+]
DMARC Record: Present

Domain has DMARC email authentication configured

[+]
Name Servers: 2 server(s)

DNS providers: dale.ns.cloudflare.com., dawn.ns.cloudflare.com.

[+]
Branding: Complete

Site has custom branding and social media metadata

[+]
HSTS Header: Present

Site enforces HTTPS via HSTS

[?]
Server: cloudflare

Web server: cloudflare

[+]
Google Web Risk: Clean

No threats detected by Google Web Risk

[+]
robots.txt: Present

robots.txt has 10 directives

[+]
Sitemap: 9 pages

Site maintains a proper sitemap with 9 indexed pages

[?]
Certificate Transparency: Unable to check

crt.sh returned status 502

[+]
Website Status: Online

Website is live and responding

[+]
Contact Info: Found

Website appears to have contact information

[+]
Legal Pages: Privacy & Terms found

Website has both privacy policy and terms of service pages

[+]
Social Media Presence: 5 platforms

Website links to multiple social media platforms

[+]
DNS Blacklists: Clean

Not found on any DNS blacklists

[?]
Web Archive: Unable to check

Could not query Wayback Machine

[+]
Page Load Time: 103ms

Fast page load

Embed This Badge

Own this site? Show visitors your trust score.

Trust badge for surfshark.com
<a href="https://verified.fyi/review/surfshark.com"><img src="https://verified.fyi/badge/surfshark.com?size=medium&style=full&theme=dark" alt="surfshark.com trust score — verified.fyi" /></a>
[![surfshark.com trust score](https://verified.fyi/badge/surfshark.com?size=medium&style=full&theme=dark)](https://verified.fyi/review/surfshark.com)

Stay Safe Online

Good habits to protect yourself, no matter the scan result.

Use a password manager

Never reuse passwords across sites.

Enable two-factor authentication

Add a second layer of security to your accounts.

Check before you buy

Always verify unfamiliar stores before entering payment info.

When evaluating a VPN service like Surfshark, security and trustworthiness are paramount. This isn't just about whether a website is functional, it's about whether the service it provides will genuinely safeguard your online activities, which is exactly what a good VPN should do. Surfshark.com stands out with its nearly two-decade-old domain, a testament to its long-term presence in a competitive industry. Most legitimate and established VPN providers demonstrate this kind of longevity. Critically, a VPN service needs to be transparent about its operations and how it handles user data. Surfshark.com earns points here with easily accessible contact information, comprehensive legal pages including privacy and terms, and an active social media presence. These are indicators that the company is willing to engage with its user base and operate openly. My main caution for Surfshark.com stems from the number of external scripts loaded on the page. While not inherently malicious, a high count can sometimes indicate unnecessary third-party dependencies, which for a security product, could introduce an extra layer of privacy or security risk. However, it's reassuring that the site remains clean on Google Web Risk and other blacklists, and employs strong foundational security measures like TLS 1.3 and HSTS, which are essential for protecting your connection. Overall, Surfshark.com projects a strong, transparent, and technically sound image for a VPN provider.