Mullvad VPN

capture taken 11m ago

what the page says

Mullvad VPN - Privacy is for the people

Free the internet from mass surveillance and censorship. Fight for privacy with Mullvad VPN and Mullvad Browser.

Skip to main content Connection check disabled Menu VPN Browser Pricing Downloads Why privacy matters Log in Get started Privacy is for the people A free and open society is built upon privacy. If people don’t have the right to decide for themselves exactly when and with whom they want to share their thoughts and ideas, then all other rights are at risk. That’s why we fight for a free internet. Free from mass surveillance and censorship. Free from personal data collection and business models where your online behavior is treated as a commodity. MULLVAD VPN MULLVAD BROWSER And Then? A short…

reachability history

The 5 most recent checks.
When	Status	HTTP	Response	Bytes	Via
11m ago	Alive	200	601 ms	57,306	chrome-stealth
1h ago	Alive	200	736 ms	57,306	chrome-stealth
2h ago	Alive	200	256 ms	57,306	chrome-stealth
4h ago	Alive	200	408 ms	57,306	chrome-stealth
6h ago	Alive	200	685 ms	57,306	chrome-stealth

security headers

Csp

Raw

default-src 'self'; frame-src https://js.stripe.com https://newassets.hcaptcha.com https://www.paypal.com; font-src 'self' data:; img-src 'self' data: https://www.paypalobjects.com https://media.mullvad.net; media-src 'self' https://media.mullvad.net; object-src 'none'; script-src 'self' https://js.stripe.com https://js.hcaptcha.com https://newassets.hcaptcha.com https://www.paypal.com 'unsafe-hashes' 'sha256-7dQwUgLau1NFCCGjfn9FsYptB6ZtWxJin6VohGIu20I=' 'nonce-1JHflQJAS5g0Y2bWRVvvgA=='; style-src 'self' 'unsafe-inline'; base-uri 'self'; frame-ancestors 'none'; connect-src 'self' https://*.mullvad.net

Directives

Default src: 'self'
Frame src: https://js.stripe.comhttps://newassets.hcaptcha.comhttps://www.paypal.com
Font src: 'self'data:
Img src: 'self'data:https://www.paypalobjects.comhttps://media.mullvad.net
Media src: 'self'https://media.mullvad.net
Object src: 'none'
Script src: 'self'https://js.stripe.comhttps://js.hcaptcha.comhttps://newassets.hcaptcha.comhttps://www.paypal.com'unsafe-hashes''sha256-7dQwUgLau1NFCCGjfn9FsYptB6ZtWxJin6VohGIu20I=''nonce-1JHflQJAS5g0Y2bWRVvvgA=='
Style src: 'self''unsafe-inline'
Base uri: 'self'
Frame ancestors: 'none'
Connect src: 'self'https://*.mullvad.net

Unsafe inline

yes

Unsafe eval

X frame options

SAMEORIGIN

X content type options

nosniff

Referrer policy

same-origin

Permissions policy

Accelerometer: ()
Ambient light sensor: ()
Autoplay: ()
Battery: ()
Camera: ()
Cross origin isolated: ()
Display capture: ()
Document domain: ()
Encrypted media: ()
Execution while not rendered: ()
Execution while out of viewport: ()
Fullscreen: (self)
Geolocation: ()
Gyroscope: ()
Keyboard map: ()
Magnetometer: ()
Microphone: ()
Midi: ()
Navigation override: ()
Payment: ()
Picture in picture: ()
Publickey credentials get: ()
Screen wake lock: ()
Sync xhr: ()
Usb: ()
Web share: ()
Xr spatial tracking: ()

Cross origin

Opener: same-origin-allow-popups
Resource: same-origin

Cookies

Count: 0
Secure: 0
Httponly: 0
Samesite: 0

Score

69

Missing

hstscoep

technology detected

Server

Raw: nginx
Name: nginx
Family: nginx

Protocol

http/1.1

what blocks us

Detected: no
Confidence: 0
Waited ms: 0
Http code: 200
Via: chrome-stealth

contacts published

Emails[email protected]
Total1

crypto addresses

Total0

forms on the page

Count

1

Kinds

Other: 1

Has login

Has search

Has upload

Forms

Kind
other
Method
post
Action
http://o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiad.onion/en
Inputs
22
Types
submit
Password
no
File
no

outbound onion links

onion_unique not tracked onion_unique
onion_total not tracked onion_total
clearnet_unique not tracked clearnet_unique 5
internal not tracked internal 41
external not tracked external 5
total not tracked total 68
truncated not tracked truncated

response headers

Header	Value
`connection`	keep-alive
`content-encoding`	gzip
`content-type`	text/html
`date`	Fri, 21 Aug 2026 17:52:05 GMT
`server`	nginx
`transfer-encoding`	chunked
`content-security-policy`	default-src 'self'; frame-src https://js.stripe.com https://newassets.hcaptcha.com https://www.paypal.com; font-src 'self' data:; img-src 'self' data: https://www.paypalobjects.com https://media.mullvad.net; media-src 'self' https://media.mullvad.net; object-src 'none'; script-src 'self' https://js.stripe.com https://js.hcaptcha.com https://newassets.hcaptcha.com https://www.paypal.com 'unsafe-hashes' 'sha256-7dQwUgLau1NFCCGjfn9FsYptB6ZtWxJin6VohGIu20I=' 'nonce-1JHflQJAS5g0Y2bWRVvvgA=='; style-src 'self' 'unsafe-inline'; base-uri 'self'; frame-ancestors 'none'; connect-src 'self' https://*.mullvad.net
`cross-origin-opener-policy`	same-origin-allow-popups
`cross-origin-resource-policy`	same-origin
`etag`	W/"5ws3km"
`permissions-policy`	accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(self), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()
`referrer-policy`	same-origin
`x-content-type-options`	nosniff
`x-frame-options`	SAMEORIGIN
`x-sveltekit-page`	true