Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Let's Encrypt

Established domain (8+ years old)

Not found on any blacklist (1 sources checked)

Strong email security (SPF, DKIM, DMARC configured)

Privacy policy present

Modern security headers configured (HSTS, CSP)

Good website performance

Contact information available

Negative Signals

WHOIS information hidden (privacy protection enabled)

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

60/100

⚠ SSL Expired (20) ✓ HSTS (20) ✓ CSP (20) ✗ X-Frame (20)

SSL Certificate

Issuer

Let's Encrypt

Valid From

Oct 28, 2025

Valid Until

Jan 26, 2026

Certificate Expired

Security Headers

HSTS

CSP

How Was This Calculated?

Transparency into our FlareScore™ methodology and data sources used for this analysis.

joinmastodon.org Analysis

FlareScore™: 93/100 (Safe Risk)

Our analysis of joinmastodon.org identified 8 positive security indicators and 1 potential concerns. The FlareScore™ rating combines technical security measures, domain reputation, and content analysis.

SSL Certificate Analysis

Domain Age: 8 years 11 months

AI Content Review

22 DNS Records

Analysis Sources

• WHOIS: Gandi SAS
• SSL: Let's Encrypt
• DNS: 22 records analyzed
• Content: Visual & text analysis

Last Checked

Dec 22, 2025
2 months ago

Transparency Note: Our analysis is based on publicly available data and automated scanning. For detailed methodology and accuracy metrics, visit our methodology page.

Domain & WHOIS Information

Domain Age

8 years 11 months

Registered Apr 06, 2017

Very High Trust

Apr 2017 Expires Apr 2029

Established domain (5+ years) - High trust indicator

Registrar

Gandi SAS

Registration Date

Apr 06, 2017 (8 years ago)

Last Updated

Jun 03, 2025

Expiration Date

Apr 06, 2029 (1129 days remaining)

Server Location

Canada

Abuse Contact

N/A

Domain Name: joinmastodon.org
Registry Domain ID: REDACTED
Registrar WHOIS Server: http://whois.gandi.net
Registrar URL: http://www.gandi.net
Updated Date: 2025-06-03T14:23:13Z
Creation Date: 2017-04-06T19:27:09Z
Registry Expiry Date: 2029-04-06T19:27:09Z
Registrar: Gandi SAS
Registrar IANA ID: 81
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +33.170377661
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: ns1.exoscale.ch
Name Server: ns1.exoscale.com
Name Server: ns1.exoscale.io
Name Server: ns1.exoscale.net
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://icann.org/wicf/
>>> Last update of WHOIS database: 2025-12-22T20:46:11Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

Terms of Use: Access to Public Interest Registry WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Identity Digital except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.  The Registrar of Record identified in this output may have an RDDS service that can be queried for additional information on how to contact the Registrant, Admin, or Tech contact of the queried domain name.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

4

A

8

AAAA

1

MX

4

TXT

4

NS

                                                            151.101.65.91
                                                        

                                                            151.101.129.91
                                                        

                                                            151.101.193.91
                                                        

                                                            151.101.1.91
                                                        

                                                            2a04:4e42:c00::347
                                                        

                                                            2a04:4e42:e00::347
                                                        

                                                            2a04:4e42::347
                                                        

                                                            2a04:4e42:200::347
                                                        

                                                            2a04:4e42:400::347
                                                        

                                                            2a04:4e42:600::347
                                                        

                                                            2a04:4e42:800::347
                                                        

                                                            2a04:4e42:a00::347
                                                        

                                                            google-site-verification=HireWwzGlFDP1DwVu9QWZPc32E2T6ABj2SG_S17n5tQ
                                                        

                                                            google-site-verification=ZdmUdPkn5AACdTIaHKg-x5DL9Z0UEeQMt6QXplRQq8U
                                                        

                                                            have-i-been-pwned-verification=dweb_n410bsmsvupii63ib5jghysh
                                                        

                                                            v=spf1 include:_spf.google.com include:helpscoutemail.com ~all
                                                        

SPF

                                                            ns1.exoscale.com
                                                        

                                                            ns1.exoscale.io
                                                        

                                                            ns1.exoscale.net
                                                        

                                                            ns1.exoscale.ch
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (5)

Content Security Policy

Permissions Policy

Referrer Policy

MIME Sniffing Protection

HSTS

Cache Policy

                                            s-maxage=300, stale-...
                                        

Proxy/CDN

                                            1.1 varnish, 1.1 var...
                                        

Cache Status

                                            HIT, HIT
                                        

{
    "cache-control": "s-maxage=300, stale-while-revalidate=31535700",
    "content-encoding": "gzip",
    "content-security-policy": "default-src 'self'; child-src 'self'; object-src 'none'; img-src 'self' proxy.joinmastodon.org blob: data: https:\/\/queue.simpleanalyticscdn.com https:\/\/simpleanalyticsbadges.com; style-src 'self' 'unsafe-inline'; script-src 'self' https:\/\/scripts.simpleanalyticscdn.com; connect-src 'self' api.joinmastodon.org https:\/\/queue.simpleanalyticscdn.com https:\/\/scripts.simpleanalyticscdn.com; block-all-mixed-content",
    "content-type": "text\/html; charset=utf-8",
    "etag": "\"b804lsxqwg2j2i\"",
    "permissions-policy": "camera=(), microphone=(), geolocation=(), browsing-topics=()",
    "referrer-policy": "origin-when-cross-origin",
    "x-content-type-options": "nosniff",
    "x-nextjs-cache": "HIT",
    "via": "1.1 varnish, 1.1 varnish",
    "accept-ranges": "bytes",
    "age": "472",
    "date": "Mon, 22 Dec 2025 20:46:10 GMT",
    "x-served-by": "cache-fra-eddf8230126-FRA, cache-lcy-egml8630098-LCY",
    "x-cache": "HIT, HIT",
    "x-cache-hits": "396, 0",
    "vary": "Accept-Language, Accept-Encoding",
    "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
    "alt-svc": "h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400",
    "content-length": "14594"
}

IP Geolocation

Server location and network information

Canada

Montreal

IP Address

151.101.129.91

ISP / Hosting

Fastly, Inc.

Coordinates

45.5019, -73.5674

Country Code

CA

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 include:_spf.google.com include:helpscoutemail.com ~a...

DKIM

Configured

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:re+o0lrkfqmq6a@d...

Performance Metrics

Website loading speed and performance analysis

85

Average

Load Time

0.15s

Excellent

Page Size

0.11MB

Optimized

Requests

178

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.joinmastodon.org

blog.joinmastodon.org

shop.joinmastodon.org

api.joinmastodon.org

demo.joinmastodon.org

app.joinmastodon.org

help.joinmastodon.org

Privacy & Trackers

0 Trackers Found

Privacy Policy

Website Screenshot

In-Depth Analysis

Overview

Joinmastodon.org serves as the central hub for Mastodon, a decentralized social media platform. The site provides information about the platform, its features, and helps users find and join various Mastodon servers (instances).

Security Assessment

The website exhibits a strong security posture. A valid SSL certificate issued by Let's Encrypt, expiring in 2026, ensures encrypted communication. The domain age of over 8 years suggests stability and trustworthiness. Importantly, Google Safe Browsing reports a clean status, indicating no detected threats and a positive trust signal. The use of Fastly, a reputable CDN, contributes to performance and security.

Trust Level

With a FlareScore of 93/100, joinmastodon.org presents a low-risk profile. The high score is supported by the clean Google Safe Browsing status, valid SSL, and established domain age.

Recommendations

Users can generally trust joinmastodon.org for information about the Mastodon platform. Always verify the specific instance you choose to join separately, as joinmastodon.org is just a central hub. While the site itself appears safe, individual Mastodon instances may have varying security practices. Review the privacy policies of any instance you join.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

Sign In Create Account

No reviews yet.

Analysis for

joinmastodon.org

FlareAI™ Summary