Is infosec.exchange legit? TrustSniffer's high-trust assessment: 100/100

Overview

The website is an established, independently administered Mastodon instance serving information-security and cybersecurity communities through federated accounts, public posts, hashtags, news links, and community discovery, with account registration and login supporting participation in the wider fediverse.

Scam/Impersonation Risk

No scam, phishing, brand-impersonation, or conflicting-identity indicators were observed. The public trending page behaves consistently with its stated function as a user-generated social feed: it presents federated content without financial solicitations, crypto offers, purchase flows, deceptive forms, or abnormal browser activity. Its long-established domain, substantial global traffic footprint, strong page authority, and clean reputation across the evaluated threat-intelligence sources provide convergent legitimacy evidence.

• The domain registration record shows registration through 1API GmbH on 5 April 2017: registered in 2017 and approximately 9.32 years old, with expiry on 5 April 2027.
• The explore page identifies the service as an information- and cybersecurity-focused Mastodon community, names “Scary Jerry” as its administrator, and reports approximately 10,000 active users.
• The evaluated reputation sources recorded no malicious or suspicious detections, no malicious safe-browsing classification, no external blacklist finding, and no reported abuse against the assessed delivery address.
• The domain holds global traffic rank 30,412 and falls within the top one million websites; the assessed page also carries high page authority.

Regulatory Verification Notes

The service presents itself as a social-networking community rather than a broker, investment platform, payment provider, or other regulated financial service. The supplied page makes no financial-product or licensing claim, and no deposit, investment, or purchase mechanism is present; consequently, the absence of a financial licence is not inconsistent with the apparent business model. Links to privacy and terms pages, together with the named administrator and published server information, provide an appropriate governance framework for this type of community service. The absence of a match in the supplied broker-reputation dataset is neutral and unsurprising for a non-broker platform.

• The explore page provides links to the site’s privacy policy, terms of service, about information, profiles directory, and source code.
• The page describes an advertising-free Mastodon service; no sustaining revenue mechanism is displayed, but neither a payment nor investment flow is offered.
• The inspected page contained no sensitive-data form, hidden form, untrusted form destination, or embedded login form; account access is provided through ordinary navigation.
• The site’s transport encryption uses a DV TLS certificate issued by YR2, valid until 27 October 2026.

What to Verify Next

Prospective account holders should review the published privacy policy and terms to understand moderation, data retention, federation, and account-removal practices. The domain should be confirmed in the browser before authentication, and standard account-security controls—particularly a unique password and any available multifactor authentication—should be used. Organizations considering an official presence should also confirm administrator and moderation escalation channels independently.

• The public page exposes dedicated privacy-policy and terms-of-service paths for pre-registration review.
• The page identifies the community administrator and provides server-level about information that can support operational due diligence.
• Account creation and login links are visibly associated with the Mastodon instance’s normal participation workflow.
• Observed browser behavior showed no credential forwarding, clipboard interference, wallet-provider access, cloaking, or suspicious inline scripts.

Summary Verdict

The site is a legitimate, established, and trustworthy community platform, with mutually reinforcing identity, reputation, authority, and behavioral signals and no observed contradictions. Normal interaction, including account creation, login, and standard use, is appropriate.

Infrastructure Integrity

The website is delivered through Fastly’s mainstream CDN/WAF infrastructure, which reduces direct exposure of the origin server and provides a meaningful operational-security mitigation, although protective infrastructure is not itself proof of legitimacy. All observed addresses were Fastly edge nodes, and no origin candidate was exposed during the assessment.

• The site is served from AS54113 (FASTLY – Fastly, Inc., US).
• Eight observed addresses were classified as CDN edge addresses; the confirmed address 151.101.131.52 is located on AS54113.
• Fastly was the identified CDN/WAF provider, and the observed network infrastructure resolved normally.

Closing Assessment

Prospective users may engage with the service normally while applying routine social-platform account-security and content-verification practices.