{"eid":"surfshark","name":"Surfshark","domain":"surfshark.com","resolved_by":"domain","topics":["egress","ip-proxy"],"n_records":2,"best_vorder":3,"review":null,"aliases":["Surfshark","surfshark.com"],"records":[{"rid":"ip-proxy/surfshark-exits","card":{"rid":"ip-proxy/surfshark-exits","eid":"surfshark","topic":"ip-proxy","slug":"surfshark-exits","provider":"Surfshark","url":"https://surfshark.com/pricing","domain":"surfshark.com","category":"vpn subscription (exit source)","tier":"exit addresses","verdict":"paid-only","vorder":3,"grp":"paid","self_hosted":0,"confidence":"measured","binding":"none","identity_kind":"email","identity_basis":"defaulted","needs_card":null,"needs_phone":null,"needs_id":null,"needs_institution":null,"country":null,"crypto":null,"interfaces":null,"egress_metered":0,"per_object_bytes":null,"retention_days":null,"verified_at":"2026-11-04T00:30:00.000Z","verified_basis":"live","checked_on":"2026-11-04","stale_on":"2026-12-05","n_evidence":4,"usd_month":null,"usd_per_tb_month":null,"summary":"No free plan read. The pricing page FAQ states monthly, 1-year and 2-year subscriptions; the amounts did not load in the captured text, so no price is recorded.","duplicate_of":null,"n_unknown":3,"free_unit":"none"},"record":{"topic":"ip-proxy","slug":"surfshark-exits","provider":"Surfshark","url":"https://surfshark.com/pricing","category":"vpn subscription (exit source)","tier":"exit addresses","free_tier":{"stated":"No free plan read. The pricing page FAQ states monthly, 1-year and 2-year subscriptions; the amounts did not load in the captured text, so no price is recorded.","unit":"none","metered_on":"none","source_url":"https://surfshark.com/pricing","read_on":"2026-11-04","notes":"The price is the vendor's plan rate for the subscription whose exits are classified here; the exit-address measurement itself has no price."},"per_object_cap":{"stated":"not applicable","bytes":null,"source_url":"https://api.surfshark.com/v4/server/clusters/generic","notes":"The classified sample is 142 addresses over 18 ASNs; none of those numbers is an object size."},"retention":{"stated":"not applicable: an address, not an object","days":null,"source_url":"https://api.surfshark.com/v4/server/clusters/generic","notes":"Nothing is stored, so no retention clock applies. How long one exit address is held before it is re-drawn was not observed."},"egress":{"terms":"unverified: no traffic allowance or per-GB price appears in the captured pages; metered is recorded false because no metered charge was read.","metered":false,"free_allowance":"none published","price_per_tb":null,"source_url":"https://surfshark.com/pricing"},"interface":["unknown"],"interface_detail":"The server list at https://api.surfshark.com/v4/server/clusters/generic is the source of the exit addresses classified here. The schema interface enum has no token for a VPN tunnel, so the tunnel protocols are not recorded as an interface.","endpoint":"https://api.surfshark.com/v4/server/clusters/generic","tooling":"The exit addresses are read from https://api.surfshark.com/v4/server/clusters/generic and classified with an IP-class detector; the service itself is reached with the vendor's own client or a WireGuard or OpenVPN configuration.","chaining":"A Worker or a free compute node dials the tunnel and the traffic leaves at one of these exit addresses, so the upstream sees an address in the ASNs listed here and not the caller's network.","limits":[{"kind":"per-ip-shaping","value":"unverified: no device or connection ceiling appears in the captured pages","source":"https://surfshark.com/pricing"}],"binding":"none","binding_note":"No limit kind binds the record: it measures exit addresses and states no byte quota or request rate. What matters is list membership: 137 of 142 sampled exits are on a datacenter list.","identity_cost":{"kind":"email","detail":"unverified: the purchase flow was not read; an account is required to use the service.","country":null},"reliability_note":"137 of 142 sampled exit addresses are on a datacenter list and 113 of 142 on a VPN list, so a site that blocks those lists blocks most of this fleet; 0 of 142 are also on an abuse list.","confidence":"measured","confidence_note":"The list membership, ASN spread and counts are measured: each address was answered by the detector at the stated index version. The plan price and the identity class are documented from the vendor's captured pages; where a page did not state them they are unverified. The sample is the addresses the vendor endpoint returned, not proof that every address a user is handed is in it.","evidence":[{"url":"probe:https://api.surfshark.com/v4/server/clusters/generic","date":"2026-11-03","capture":"sha256:d359db0a5cace09ce84aa6278550ca6bb3c435918f4db8781353fac7c57b2e97","quote":"\"n\": 142,","proved":"The vendor endpoint https://api.surfshark.com/v4/server/clusters/generic gave 142 IPv4 exit addresses, each answered by the address-class detector at index version 20261103T163900Z-00d117b2 on 2026-11-03. Datacenter list: 137 of 142; VPN list: 113 of 142 (108 in the x4b VPN list); abuse list: 0 of 142; on none of the three: 5 of 142. 18 distinct ASNs and 142 distinct /24s; largest ASN AS209854 Cyberzonehub Cyberzone S.A. with 65 addresses."},{"url":"probe:https://api.surfshark.com/v4/server/clusters/generic","date":"2026-11-03","capture":"sha256:d359db0a5cace09ce84aa6278550ca6bb3c435918f4db8781353fac7c57b2e97","quote":"\"index_version\": \"20261103T163900Z-00d117b2\",","proved":"Detector index version 20261103T163900Z-00d117b2 was the one every one of the 142 answers carries."},{"url":"https://surfshark.com/pricing","date":"2026-11-04","capture":"sha256:122ce05cdc5bd135140b43734fb29fed1d9abc0c3d6b3f7f3e630cfc8bcf2e75","quote":"Surfshark offers monthly, 1-year, and 2-year subscriptions, and all of them are billed differently:","proved":"the plans are monthly, 1-year and 2-year subscriptions"},{"url":"https://surfshark.com/pricing","date":"2026-11-04","capture":"sha256:122ce05cdc5bd135140b43734fb29fed1d9abc0c3d6b3f7f3e630cfc8bcf2e75","quote":"Yes. Surfshark offers unlimited simultaneous device connections, which means you can protect your whole household for the cost of a single [VPN](https://surfshark.com/vpn) subscription.","proved":"one account has unlimited simultaneous device connections"}],"verdict":"paid-only","verified_at":"2026-11-04T00:30:00.000Z","notes":"List membership of 142 exit addresses (detector index version 20261103T163900Z-00d117b2, 2026-11-03): datacenter 137, VPN 113, abuse 0, none of the three 5. VPN list: 113 of 142, of which 108 are in the x4b VPN list. Definitions: datacenter is an address inside a range the x4b datacenter list publishes; VPN is inside the x4b VPN list or a per-provider server list; abuse is on at least one independent abuse family; none of the three states list membership, not physical siting.","extras":{"rung":4,"rung_note":"Addresses came from the vendor's own server list and each was classified; no exit was connected to, so the address a user is handed at connect time was not observed.","list_membership":{"measured_on":"2026-11-03","n":142,"datacenter":137,"vpn":113,"vpn_in_x4b":108,"abuse":0,"none_of_the_three":5,"detector_index_version":"20261103T163900Z-00d117b2","probed_at":"2026-11-03T17:20:53Z","endpoint":"https://api.surfshark.com/v4/server/clusters/generic"},"asn_diversity":{"measured_on":"2026-11-03","addresses":142,"subnets_24":142,"asns":18,"largest_asn":"AS209854 Cyberzonehub Cyberzone S.A.","largest_asn_addresses":65,"largest_asn_share":"46%"}}},"claims":[{"path":"$.free_tier","kind":"has-free-tier","num":0.0,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"ok"},{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[0].value","kind":"limit:per-ip-shaping","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"}],"unknown":[["$.identity_cost.kind","identity-defaulted"],["$.interface","interface-unknown"],["$.per_object_cap.stated","not-applicable"]],"history":[],"drift":[]},{"rid":"egress/surfshark","card":{"rid":"egress/surfshark","eid":"surfshark","topic":"egress","slug":"surfshark","provider":"Surfshark","url":"https://surfshark.com/blog/vpn-port-forwarding","domain":"surfshark.com","category":"vpn port forward","tier":"paid","verdict":"fails-egress","vorder":5,"grp":"rejected","self_hosted":0,"confidence":"documented","binding":"write-gated","identity_kind":"email","identity_basis":"defaulted","needs_card":null,"needs_phone":null,"needs_id":null,"needs_institution":null,"country":null,"crypto":null,"interfaces":"cli","egress_metered":0,"per_object_bytes":null,"retention_days":null,"verified_at":"2026-11-04T10:29:23.993Z","verified_basis":"live","checked_on":"2026-11-04","stale_on":"2026-12-05","n_evidence":10,"usd_month":2.49,"usd_per_tb_month":null,"summary":"No free tier, and the vendor refuses the feature: Surfshark VPN does not support port forwarding because it creates a potential network entry point that expo...","duplicate_of":null,"n_unknown":4,"free_unit":"none"},"record":{"topic":"egress","slug":"surfshark","provider":"Surfshark","url":"https://surfshark.com/blog/vpn-port-forwarding","category":"vpn port forward","tier":"paid","free_tier":{"stated":"No free tier, and the vendor refuses the feature: Surfshark VPN does not support port forwarding because it creates a potential network entry point that exposes devices to unauthorized connections. Pricing page 2026-11-04: Surfshark Starter at $2.49/mo, $67.23 for the first 27 months (24 months plus 3 extra); a 1-year plan is mentioned but its price is unverified: the page shows no 1-year figure.","unit":"none","metered_on":"none","source_url":"https://surfshark.com/blog/vpn-port-forwarding","read_on":"2026-10-23","notes":""},"per_object_cap":{"stated":"not applicable","bytes":null,"source_url":"https://surfshark.com/blog/vpn-port-forwarding","notes":""},"retention":{"stated":"not applicable","days":null,"source_url":"https://surfshark.com/blog/vpn-port-forwarding","notes":""},"egress":{"terms":"unverified: no page read states a Surfshark traffic allowance.; ingress: none","metered":false,"free_allowance":"none published","price_per_tb":null,"source_url":"https://surfshark.com/blog/vpn-port-forwarding"},"interface":["cli"],"interface_detail":"App and extension based. Protocols: WireGuard, IKEv2, OpenVPN (UDP or TCP) and Dausos (macOS app). Shadowsocks is not offered. No SOCKS5 proxy is offered (third-party report). Obfuscation: OpenVPN runs on obfuscated servers, and NoBorders covers restricted networks. P2P-optimized servers exist.","tooling":"Official apps; WireGuard supported for outbound.","chaining":"Client-side tunnel only.","limits":[{"kind":"write-gated","value":"the feature is not offered at any tier: Surfshark VPN does not support port forwarding","source":"https://surfshark.com/blog/vpn-port-forwarding"}],"limits_note":"","binding":"write-gated","binding_note":"No inbound path exists, so no volume or identity constraint is reachable.","identity_cost":{"kind":"email","detail":"unverified: the purchase flow was not read; an account is required to use the service.","country":"None"},"reliability_note":"No inbound path exists at any tier.","confidence":"documented","confidence_note":"The refusal is a direct vendor sentence on a vendor page read. Measured is impossible.","evidence":[{"url":"https://surfshark.com/blog/vpn-port-forwarding","date":"2026-10-23","proved":"Surfshark VPN does not support port forwarding, stated as the vendor's own answer, with security exposure given as the reason."},{"url":"https://surfshark.com/pricing","date":"2026-11-04","proved":"the Starter plan sale price is $67.23 for the first 27 months","capture":"sha256:f41e5c1e7f849798635d33274d50d905a31cf9e605a11a01e581ca2df87f9587","quote":"<s>$511.65</s> <span class=\"_7CafX\">sale price</span> <strong>$67.23</strong> for the first 27 months"},{"url":"https://surfshark.com/features/surfshark-vpn-protocols","date":"2026-11-04","proved":"Surfshark offers Dausos, WireGuard, OpenVPN and IKEv2","capture":"sha256:0f3b4644c91f9f8455efff56c3e58195e709eea7e28d990a40afc28100545024","quote":"Surfshark VPN protocols: Dausos, WireGuard, OpenVPN, IKEv2"},{"url":"https://support.surfshark.com/hc/en-us/articles/360010324739-What-protocols-can-I-use-with-Surfshark","date":"2026-11-04","proved":"OpenVPN is selectable over UDP or TCP","capture":"sha256:952d8cc29f5e893aa407f230dae78ad1af862f2f07566088f9d284404dbdb78e","quote":"If you are using the Surfshark app, you will find two options for OpenVPN: UDP and TCP."},{"url":"https://support.surfshark.com/hc/en-us/articles/360010324739-What-protocols-can-I-use-with-Surfshark","date":"2026-11-04","proved":"OpenVPN on Surfshark uses obfuscated servers","capture":"sha256:952d8cc29f5e893aa407f230dae78ad1af862f2f07566088f9d284404dbdb78e","quote":"while using this protocol on Surfshark, you are using obfuscated servers"},{"url":"https://support.surfshark.com/hc/en-us/articles/10448039999122-Surfshark-Features","date":"2026-11-04","proved":"NoBorders is the restricted-network mode","capture":"sha256:763414df4290ef860302dccff5ddb90e0b9133e52a7799253c3418244308732c","quote":"lets you use a VPN through network restrictions such as geoblocking or government censorship"},{"url":"https://surfshark.com/blog/surfshark-will-stop-supporting-shadowsocks","date":"2026-11-04","proved":null,"capture":"sha256:1cae02594bffd9be2b9c9927f76705ed4eb40d96f6f7ac970330c48c31ed080c","quote":"Surfshark will stop supporting Shadowsocks this week"},{"url":"https://vpnalert.com/guides/surfshark-socks5/","date":"2026-11-04","proved":"a third party reports no SOCKS5 proxy is offered","capture":"sha256:7967e6acf4ffd84ae058772267b2c45dab987361a7f05ad73d7ec727582cd15b","quote":"offer SOCKS5 proxy as a standalone service or an add-on to its VPN service"},{"url":"https://surfshark.com/blog/surfshark-vs-ipvanish","date":"2026-11-04","proved":"the vendor blog lists P2P-optimized servers","capture":"sha256:8c5f4897261c54d193e5d5df8b0ae99f738a4efcc6022274d1c2d994f28e716f","quote":"Servers optimized for secure P2P (peer-to-peer) file exchange"},{"url":"https://surfshark.com/pricing","date":"2026-11-04","proved":"Surfshark Starter is 67.23 USD for the first 27 months","capture":"sha256:8330d2f7ca4358bbb6aefe4c15665b127f082f4dca193cbe26079fb2228ac253","quote":"old price $511.65 sale price $67.23 for the first 27 months (VAT may apply)."}],"verdict":"fails-egress","verified_at":"2026-11-04T10:29:23.993Z","price_per_tb_month":"USD 2.49 per month on Surfshark Starter, USD 67.23 for the first 27 months (24 months plus 3 extra)","notes":"A third-party guide from 2021 said the same thing, which makes the position at least five years old rather than a recent withdrawal. No conflict found. The dedicated IP product Surfshark sells is an address, not a forwarded port, and was not read.","extras":{"wg_path":"native-conf","wg_detail":"WireGuard is a supported protocol under the vendor's own client; the config does not create an inbound path because none is sold.","ingress":"none","volume_tib_month":null,"volume_stated":"unverified: no page read states a Surfshark traffic allowance.","bytes_transit":"yes","transit_note":"Outbound only from a user's point of view."}},"claims":[{"path":"$.free_tier","kind":"has-free-tier","num":0.0,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"ok"},{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[0].value","kind":"limit:write-gated","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.price_per_tb_month","kind":"price","num":2.49,"unit":null,"per":"month","currency":"USD","usd":2.49,"fx_date":null,"parse":"ok"}],"unknown":[["$.evidence[6].proved","withheld"],["$.identity_cost.kind","identity-defaulted"],["$.per_object_cap.stated","not-applicable"],["$.retention.stated","not-applicable"]],"history":[],"drift":[]}]}