WebVetted
+ New
Site icon

Domain Due Diligence

Report for Surfshark.com

Report Date
October 10, 2025
Recommendation
Caution
Overall Summary
Suspicious
  Why we think so? 

Surfshark.com operates a widely used VPN service with over 7 million monthly visits, primarily from the US and other major countries. It offers strong technical infrastructure, including Cloudflare CDN and secure HTTPS, and uses reputable email domains like support@surfshark.com. The domain is established with WHOIS records dating back to 2007, and it is not found on any scam or blacklist databases. However, it faces several class action lawsuits in California due to allegations about unclear and possibly deceptive auto-renewal billing practices. User complaints primarily center on unexpected renewal charges and difficulties canceling subscriptions, rather than security breaches or hacking. Independent expert reviews generally rate Surfshark VPN positively for security and privacy features, suggesting the core service is legitimate. Consumers should remain cautious around subscription terms and billing disclosures.

Confidence Score
73%

Risk Insights

🛡️

Established Domain with Strong Tech Setup

  • Domain registered since 2007.
  • Uses Cloudflare CDN and HTTPS with valid ECDSA certificate.
  • Multiple official contact emails verified.
⚠️

User Complaints on Billing Practices

  • Class action lawsuits filed regarding automatic renewals.
  • Reports of unauthorized charges after cancellation.
  • Negative user reviews impacting reputation.

Contradictory Signals

The core VPN service is legitimate, but business practices around billing raise red flags.

Signal A: Positive expert security audits and privacy features.

Signal B: Negative user reports and legal actions over billing issues.

Category Scores

Red Flags & Warnings

  • Ongoing class action lawsuits allege deceptive automatic renewal billing practices violating consumer protections.
  • Multiple user complaints report unauthorized billing after cancellation and challenges in obtaining refunds.

🔎 Detailed Checks & Analysis

Domain Age and Registrar

Score: 25/100
Passed

"Long domain age reduces likelihood of scam, registrar is legitimate."

Reason: Domain registered since 2007 via reputable registrar TurnCommerce (NameBright.com), indicating an established presence.

Technical Infrastructure

Score: 25/100
Passed

"Technology stack consistent with reputable companies; no suspicious software detected."

Reason: Uses Cloudflare CDN, valid HTTPS with ECDSA certificate, standard DNS and email configurations.

Contact Information

Score: 20/100
Passed

"Direct contact channels support authenticity."

Reason: Official business emails available with multiple verified sources; active social media accounts corroborate identity.

User Reputation and Reviews

Score: 0/100
Failed

"Negative user feedback significantly impacts trust."

Reason: Numerous verified user complaints and fraud allegations, especially concerning billing and subscription renewal practices.

Legal and Compliance Status

Score: 10/100
Failed

"Legal disputes suggest systemic issues in business practices."

Reason: Current multiple class action lawsuits alleging deceptive billing and violation of consumer protection laws.

Blacklist and Phishing Status

Score: 20/100
Passed

"Absence from blacklist databases supports legitimacy of domain."

Reason: No listings found on crypto scam or phishing blacklists; Google Safe Browsing shows no threats.

Your Next Steps

  • 1

    Review Surfshark’s subscription terms carefully before purchase, focusing on auto-renewal and cancellation policies.

  • 2

    Monitor billing statements for unexpected charges and keep records of any cancellation requests.

  • 3

    Consult legal counsel or consumer protection agencies if you experience unauthorized charges.

  • 4

    Consider alternative VPN services if billing transparency is a priority and you want to avoid auto-renewal disputes.

  • 5

    Check for updated user reviews and official responses before subscribing to Surfshark.

Evidence & Citations

🕵🏻 Keep investigating

Recommended → 🌐 Scan another website

Run another instant due diligence scan on any website URL. Verify before you trust!

 Spot fake SaaS login pages before handing over credentials

Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...

Read playbook → Analyze giveaway landing page phishing

Giveaway pages entice with consoles or flights, then harvest card data and selfies “for verification.” ScamAI checks reg...

Read playbook →

Community feedback

Not rated yet

0 reviews published

5 stars 0%
4 stars 0%
3 stars 0%
2 stars 0%
1 star 0%

Leave a review

Reviews

No public reviews yet. Be the first to share your experience.