mullvad.net

Observed Jul 18, 2026, 12:22 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs on31173 Services AB

Email byGoogle Workspace

Secured byLet's Encrypt

Registered withDomeneshop AS dba domainnameshop.com

Also usesGoogle Search ConsoleAtlassian

4 subdomains · push_legacy

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat mullvad.net actually stands on - every host below is a signed observation

mullvad.net

A / AAAA

45.83.223.209

31173 Services ABserves the site

ns1.mullvaddns.netns2.mullvaddns.netns3.mullvaddns.netns4.mullvaddns.net

mullvaddns.netanswers its DNS

aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx2.googlemail.com+1 more

Google Workspacereceives its email

TLS

mullvad.net

Let's Encryptissued its certificate

DNS Records

A 1

45.83.223.209

MX 5

10aspmx.l.google.com
20alt1.aspmx.l.google.com
30alt2.aspmx.l.google.com
40aspmx2.googlemail.com
50aspmx3.googlemail.com

TXT 7

bunny:303437
yandex-verification: f0e9a23691826011
gradle-verification=54GHA74UUTS2760IGPVSUPJ9LE6I6
google-site-verification=T6j3fHOnwX8sOP55jYtYfVH2J27u9rIY8kM9ApBzBXQ
atlassian-domain-verification=xOPm1CvufMcUMKi8KR/Q1i69lUU6WBai4zpIFVQcBszhnTja6HPyIsw2jz/1ABSP
v=spf1 ip4:193.138.218.78 ip4:193.138.218.77 ip4:193.138.218.76 ip4:193.138.218.75 ip4:185.213.154.79 ip4:45.129.56.122 ip4:45.83.222.71 ip4:45.83.222.80 ip4:45.129.56.118 include:_spf.google.com -all
v=DMARC1; p=reject; rua=mailto:azrlj0xm@ag.eu.dmarcian.com, mailto:dmarc@mullvad.net; ruf=mailto:azrlj0xm@fr.eu.dmarcian.com, mailto:dmarcforensics@mullvad.net; rf=afrf; sp=reject; fo=1; pct=100; ri=86400; adkim=s; aspf=s

NS 4

ns1.mullvaddns.net
ns2.mullvaddns.net
ns3.mullvaddns.net
ns4.mullvaddns.net

SOA 1

ns1.mullvaddns.net support.mullvadvpn.net

CAA 3

iodef "mailto:support@mullvadvpn.net"
issue "letsencrypt.org"
issuewild "letsencrypt.org"

TLS Certificates (4)

Common Name	Issuer	Expires
`mullvad.net`	C=US, O=Let's Encrypt, CN=YE2	Tue, 08 Sep 2026 07:55:15 +0000
`YE2`	C=US, O=ISRG, CN=Root YE	Sat, 02 Sep 2028 23:59:59 +0000
`Root YE`	C=US, O=Internet Security Research Group, CN=ISRG Root X2	Thu, 02 Sep 2032 23:59:59 +0000
`ISRG Root X2`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mullvad.net. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/mullvad.net">
  <img src="https://domaindrift.io/badge/mullvad.net.svg"
       width="300" height="64" alt="DomainDrift signed observations for mullvad.net">
</a>

Ed25519 Receipt

Receipt ID: 4076846b-22ae-4292-bd10-bbaa447ab693
Output Hash: c8ec9c156752bd1cf7f5cf495852f6fb2fed94c42b070aea0cb7ee208496bc4b
Signature: ed25519:80a2155037594cd35e817a624116575e6c1d168d1aa892c4ffc5b9bfe4580bfd472af6a49538e1ac9489046fa7b9161629dd191a7aa21300fa640631d7766402
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/mullvad.net