Evidence and risk■Verified evidence/■StandardMaterial claims checked against current sources.; no material risk recorded in them.
Last reviewedReviewed 21 Sep 2026KYC checked 22 Jun 2026 · verified jurisdiction · Source → official siteHow to cite this pageSource coverageVerified evidenceRecorded riskStandard
Evidence and facts
Evidence and facts
CUNICULA SCORE 4.0
44/100△Limited evidencePrivacy 12/25 · Control 0/20 · Transparency 0/20 · Security 25/25 · Accountability 7/10 · Cap 69 · Method
JURISDICTIONSE
NOTEScheduled closure, not a current outage: Mullvad announced on September 3 that its public encrypted DNS service will close on November 2, 2026. This covers unfiltered and blocking DoH/DoT variants. Replace manual OS/browser settings and Apple DNS profiles before closure. Default and included ad-blocking Mullvad Browser DoH settings will migrate automatically to Quad9; custom settings will not. Mullvad VPN internal DNS is separate and unaffected. Encrypted DNS does not hide destination connections or replace a VPN. Closure scope checked September 21, 2026 against Mullvad's announcement and public DNS documentation.
AUDITED BYCure53
OPERATOR DATAUnknown
SOURCE COVERAGE
■Verified evidenceINDEPENDENT AUDIT1/7Reviewed 21 Sep 2026 · Source → official site
LAST CHECKED2026-09-21
LAST UPDATED2026-09-21
Specs
DOCUMENT CHECKNone recorded
IDENTITY EXPOSURELevel 0/4
KYC TRIGGERSNo account, payment or identity verification required for public Mullvad DNS endpoints.
FEEFree
CATEGORIESDNS
FEATURESDNS over HTTPS, DNS over TLS, No logging, Ad blocking, Tracker blocking, Malware blocking, Swedish jurisdiction
TORNot listed
REGIONSGlobal availability
Review analysis, source material, related services, and history
About
Public encrypted DNS over HTTPS and TLS, scheduled to close on November 2, 2026. Manually configured users must migrate; Mullvad VPN internal DNS is unaffected.
Analysis
OVERVIEW
A free public encrypted resolver from an audited VPN operator: DoH and DoT endpoints, optional blocking tiers, no account, and a stated no-logging policy for queries.
LIMITS
Using one operator for both VPN and DNS concentrates the view of traffic and lookups in a single party, and the no-logging statement for the free resolver is policy rather than audited infrastructure.
USEFUL FOR
Replacing an ISP resolver without creating an account or configuration profile anywhere.
Who owns the operator, read from the public register. Each step says what kind of evidence it rests on: a registry record can be checked, a company statement cannot.
OPERATORMullvad VPN AB559238-4001 · Sweden
SHAREHOLDERAmagicom AB556783-9807 · SwedenREGISTRY DATA
The registry record for Mullvad VPN AB names Amagicom AB, organisation number 556783-9807, as its parent company.
The chain stops here because the register stops, not because the top was reached. Swiss and Swedish companies do not publish their shareholders, and a Czech joint-stock company does not list its own. Nothing above the last step should be assumed either way.
SAME OPERATOR
Mullvad VPN AB also runs one other service shown here. Comparing them compares products, not independent companies.
No identity verification is recorded for typical use. No account, payment or identity verification required for public Mullvad DNS endpoints.
Which payment methods are accepted?
Please check the provider site for accepted payment methods.
Where is it available?
Recorded availability: GLOBAL.
Is the operator based in a Five Eyes country?
No. The recorded jurisdiction is SE, which is not a Five Eyes country. This is jurisdiction context and does not by itself establish that a service is safer or less safe.
How are identity, operator, and evidence fields reported?
Identity exposure is level 0 of 4. Hosted operator data has not been established. Jurisdiction is shown as context, not a safety verdict. Source coverage is verified evidence, last reviewed 2026-09-21, and recorded risk is standard.
No changes to the document we watch since we started checking on 9 Aug 2026. Last checked 9 Aug 2026.
Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.
Service history
Latest meaningful changes to the facts shown on this provider page.
Clarify Mullvad public DNS migration [skip render]
Card summary, Checked at, Description, Last reviewed, and 4 more
Apply full-service rereview and score 4.0
Privacy warning, Score assessment
Corporate registry information updated
Corporate / Entity type
Full service history
updated
Reconcile editorial fixtures and source inventory [skip render]
Card summary
Public DNS closing November 2, 2026; migrate manual settings. → Public DNS closes November 2, 2026; migrate settings.
Clarify Mullvad public DNS migration [skip render]
Card summary
Free encrypted DNS with optional blocking. → Public DNS closing November 2, 2026; migrate manual settings.
Checked at
2026-06-24 → 2026-09-21
Description
Free public encrypted DNS with DoH and DoT endpoints plus optional ad, tracker and malware blocking. → Public encrypted DNS over HTTPS and TLS, scheduled to close on November 2, 2026. Manually configured users must migrate; Mullvad VPN internal DNS is unaffected.
Last reviewed
2026-06-22 → 2026-09-21
Privacy warning
Encrypted DNS protects queries in transit but does not make the resolver blind to live requests. Mullvad states it logs no DNS requests or IP addresses. Anycast routing can send queries to a distant server, causing slowness or timeouts, and DNS blocking cannot block all ads or trackers. → Scheduled closure, not a current outage: Mullvad announced on September 3 that its public encrypted DNS service will close on November 2, 2026. This covers unfiltered and blocking DoH/DoT variants. Replace manual OS/browser settings and Apple DNS profiles before closure. Default and included ad-blocking Mullvad Browser DoH settings will migrate automatically to Quad9; custom settings will not. Mullvad VPN internal DNS is separate and unaffected. Encrypted DNS does not hide destination connections or replace a VPN. Closure scope checked September 21, 2026 against Mullvad's announcement and public DNS documentation.
Source reviewed
official site → Lifecycle-only review 2026-09-21: https://mullvad.net/en/blog/shutting-down-our-public-encrypted-dns-servers-and-sponsoring-quad9-instead and https://mullvad.net/en/help/dns-over-https-and-dns-over-tls . Other evidence and score inputs not re-reviewed.
not set → Outcome: HOLD; Checked at: 2026-08-25; Inputs: Operator data exposure: unknown; Control model: unknown; Source model: unknown; Audit: Score eligible: no; Reason: No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit.
not set → Encrypted DNS protects queries in transit but does not make the resolver blind to live requests. Mullvad states it logs no DNS requests or IP addresses. Anycast routing can send queries to a distant server, causing slowness or timeouts, and DNS blocking cannot block all ads or trackers.
Score assessment
not set → Operator data exposure: moderate; Control model: hosted-account; Source model: closed-audited
Free public encrypted DNS from Mullvad with DoH and DoT endpoints plus optional ad, tracker, malware and adult-content blocking. No account is required, and Mullvad states it does not log DNS requests. → Free public encrypted DNS with DoH and DoT endpoints plus optional ad, tracker and malware blocking.
Free encrypted DNS from Mullvad. DoH and DoT. No logging, ad/tracker/malware blocking. No account required. (Zero KYC) → Free public encrypted DNS from Mullvad with DoH and DoT endpoints plus optional ad, tracker, malware and adult-content blocking. No account is required, and Mullvad states it does not log DNS requests.
Jurisdiction confidence
inferred → verified
KYC last checked
2026-03-08 → 2026-06-22
Kyc note
Advertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR. → No account, payment or identity verification required for public Mullvad DNS endpoints.
Last reviewed
2026-03-08 → 2026-06-22
Source reviewed
older source, not independently verified → official site