derp20b.tailscale.com is a DERP relay server operated by Tailscale, a reputable VPN provider. Unlike a typical consumer website, this is a technical endpoint used to help establish encrypted connections between Tailscale clients. Our analysis shows it's exactly what it claims to be. The site uses modern encryption, has valid SSL, and sets security headers that prevent common web attacks. It also publishes a privacy policy and terms of service, which is more than you'd expect from a backend server. The domain itself is a subdomain of tailscale.com, a company with a long track record in the VPN space. The lack of a favicon or social media presence is irrelevant for this kind of service. If you're a Tailscale user, your traffic already passes through servers like this one — they're designed to be secure and transparent. There's no evidence of scam behavior, and the site is clean on all major threat lists. In short, derp20b.tailscale.com is a legitimate part of Tailscale's infrastructure.
In plain English
This is a legitimate Tailscale DERP relay server, not a consumer-facing website. It's owned by a well-known VPN company and meets all security and transparency standards for a backend service. You can trust it to do its job — routing encrypted traffic for Tailscale clients.
Where the score comes from
Strong security: valid certificate, modern encryption, and multiple browser protections in place. No malware or phishing flags. This is what you'd expect from a legitimate infrastructure server.
This is a subdomain of tailscale.com, a well-known VPN company. The site has an about page and contact info. WHOIS isn't available for the subdomain, but that's standard — the parent domain is the real identifier.
No blacklist hits, no Google Safe Browsing flags. Tailscale's reputation in the VPN industry is solid. The lack of Wayback history is a minor gap, but the subdomain is likely newer or not archived.
The site clearly states its purpose and provides contact info and an about page. No social media presence is normal for a technical server. The operator is transparent about what the service does.
Privacy policy and terms of service are present. For a server that doesn't collect user data directly, this is more than adequate. The legal pages are well-structured.
DNS resolves, site loads quickly, and security headers are configured. DNSSEC is not enabled, but that's common for subdomains. No email handling is fine for a relay server. No major issues.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →