HOW.IS
?

How is tailscale.com?

Looks fine risk 0/100

Registered 9 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 149 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How tailscale.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
149 ms
HTTPS
46 d
left on a Let's Encrypt certificate
Age
9 years
registered 2017-08-15
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records6 record types
A76.76.21.21
AAAA2600:9000:a51d:27c1:6748:d035:a989:fb3c
2600:9000:a602:b1e6:5b89:50a1:7cf7:67b8
MX1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com
NSns-1359.awsdns-41.org
ns-1558.awsdns-02.co.uk
ns-197.awsdns-24.com
ns-557.awsdns-05.net
TXT723757a747
MS=34DDD317D9FEB51560ED2178552EF5F487EFDA34
MS=ms19736920
MS=ms46037000
anthropic-domain-verification-vpgx4y=uwN6CwOz0NQijKYGDthCAEt9C
asv=c034fa773cb1b431402a28453995174d
atlassian-domain-verification=nffRaFBNr1PtD33kaEsaD9CvW1YDeLVUva1REQBQXomao5ORxyNOYh8uEBKGJXt1
atlassian-sending-domain-verification=8ec3fea9-480e-4fea-ad9d-b8106e2f47bd
docker-verification=3d97b1d0-f13c-49a5-a608-a4e126994fb2
figma-domain-verification=1c2de6e8a2ed198f2e74b79eb341b1e7fa0c2f8f77d967c3df1a34dc7b1b9392-1727189921
google-site-verification=4uv57KflyDjYKic07oPiF5ypArLxQQYp_e-u2RCQ2rE
google-site-verification=FdhZ5m0ygy7zoBLQNWvqJ3v0wQop9dTu5ZHYvojZlPE
google-site-verification=HHC0j5mcC05kfiQfxmiYUfsicdbGYAJyh0gKySbCcDM
google-site-verification=aISd8KPh1T5nM6tv78IhxrYXTvLqrjMLcOsV6tDc9xw
google-site-verification=uvcAEZ3qnz0lx7zpKE9DMg7FqYBSPuVK61d7zlxew3g
hubspot-domain-verification=ZjA2YWQ4OGMtYTJmMi00NGM3LWJkM2ItZGNjNjYwY2I1NTQ2
notion-domain-verification=5N4i2ZyFxTIAh8yjBjVknqRdZp9BFylUmFFV3h6M3sg
openai-domain-verification=dv-3qK0xjzrDgu9vT3wfpM2P0g2
reachdesk-verification=gzGzYoV4RdcIj5gGsLsXBmdtmVBeVfDfro9HrQ2Q6TCsKUF5xQW6PGnmTOsip3bR
stripe-verification=0ba99cfebb16921aa06471ec2581cf92c47b39cb15a8877a174bb78829e18603
stripe-verification=5fcd1c876b6a81bf6ec1888417271c54c1a7186b90e858e181224cc31b2c93ce
stripe-verification=a72a667972336ba404d79c4c29f31c0e9226e2260da4c6a4c7dce3af1ec200ca
stripe-verification=d1e4db8d6a928fe01eaf24de20ea7dc4c6ebc1fa91940e3a6a0cc59082025114
v=spf1 include:_spf.google.com include:_spf.salesforce.com include:40004831.spf02.hubspotemail.net ~all
CAA{'type': 'CAA', 'issue': 'amazon.com', 'critical': 0}
{'type': 'CAA', 'issue': 'amazonaws.com', 'critical': 0}
{'type': 'CAA', 'issue': 'amazontrust.com', 'critical': 0}
{'type': 'CAA', 'issue': 'awstrust.com', 'critical': 0}
{'type': 'CAA', 'issue': 'comodoca.com', 'critical': 0}
{'type': 'CAA', 'issue': 'digicert.com', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': ';'}
RegistrationMarkMonitor Inc.
registrarMarkMonitor Inc.
registered2017-08-15
expires2028-08-15
last changed2026-07-15
ownerREDACTED FOR PRIVACY
nameserversns-1359.awsdns-41.org
ns-1558.awsdns-02.co.uk
ns-197.awsdns-24.com
ns-557.awsdns-05.net
statusclient delete prohibited
client transfer prohibited
client update prohibited
server delete prohibited
server transfer prohibited
server update prohibited
registered 2017-08-15expires 2028-08-15
HTTPS certificate46 days left
validyes
issuerLet's Encrypt
coverstailscale.com
protocolTLSv1.3
issued 2026-09-14expires 2026-12-13
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → tailscale.com
Email authenticationexcellent
SPFpass v=spf1 include:_spf.google.com include:_spf.salesforce.com include:40004831.spf02.hubspotemail.net ~all
DMARCpass policy reject
DKIMfound: google

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 185/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
25/25
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop76.76.21.21Barracuda76.76.21.21UCEPROTECT Level 176.76.21.21

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=tailscale.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=tailscale.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on tailscale.com. Reference: /llms.txt.

Watch tailscale.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days