Other
Yes, mastodon.social is a trustworthy website with a high score of 95. This indicates that the site is generally safe and reliable for users.
Mastodon is the original server of Mastodon, operated by Mastodon GmbH for the common good.
Verisite checked mastodon.social on July 4, 2026 and gave it a trust score of 95/100. Out of 89 checks, 76 passed, with 8 warning(s) and 5 failed check(s).
95
/100
Trust Score
Excellent
Score incl. subdomains: 93/100
11
Passed
1
Warning
1
Failed
Security Headers
Checks HTTP security headers and cookie security configuration.
Security headers are well configured.
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
No exposed sensitive files or directories found.
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
No suspicious content detected on the page.
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
Valid SSL certificate found (expires 2026-08-16).
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
This domain has been registered since 2016-03-08.
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
No tracking cookies or third-party trackers detected.
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
Some business data is missing or could not be verified.
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
No reviews or trust seal found.
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
This domain was not found on any known fraud or phishing lists.
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
No outdated or vulnerable software detected.
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
Email authentication is well configured with SPF, DKIM and/or DMARC.
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
Network configuration is secure and well optimized.
DNS & Server
Checks DNS records, server information and hosting details.
DNS records are properly configured.
Security Headers
Checks HTTP security headers and cookie security configuration.
90/100
Security headers are well configured.
- Domain
- mastodon.social
- Cookies
-
- Total: 0
- Issues:
- Secure cookies: 0
- Insecure cookies: 0
- HSTS max-age
- 31557600
- Missing headers
- Permissions-Policy
- HSTS preload
- No
- Used browser fallback
- No
- Referrer-Policy
- Yes
- X-Frame-Options
- Yes
- HSTS includes subdomains
- No
- Permissions-Policy
- No
- X-Content-Type-Options
- Yes
- Content-Security-Policy
- Yes
- Strict-Transport-Security
- Yes
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
100/100
No outdated or vulnerable software detected.
- Detected CMS
-
- Name:
- Slug:
- Version:
- Detected: No
- Confidence: none
- Domain
- mastodon.social
- JavaScript libraries
- Pages scanned
- 3
- Vulnerable libraries
- Server technology
-
- Server: Mastodon
- Powered by:
- X generator:
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
100/100
No exposed sensitive files or directories found.
- Domain
- mastodon.social
- Exposures
- Robots.txt analysis
-
- Exists: No
- Interesting paths:
- Paths checked
- 18
- Exposures found
- 0
- Directory listing enabled
- No
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
78/100
Email authentication is well configured with SPF, DKIM and/or DMARC.
- SPF
-
- Exists: Yes
- Policy: softfail
- Record: v=spf1 include:_spf.google.com include:helpscoutemail.com ~all
- Mechanisms: include:_spf.google.com, include:helpscoutemail.com, all
- Policy label: checks.email_spf_softfail
- Authorized senders: Google Workspace, Help Scout
- DKIM
-
- Found: Yes
- Selectors: google, zmail
- DMARC
-
- Exists: Yes
- Policy: quarantine
- Record: v=DMARC1; p=quarantine; pct=100; rua=mailto:re+qkqn5debzpq@dmarc.postmarkapp.com; sp=none; aspf=r;
- Percentage: 100
- Policy label: checks.email_dmarc_quarantine
- Has reporting: Yes
- Subdomain policy: none
- Domain
- mastodon.social
- Authorized senders
- Google Workspace, Help Scout
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
100/100
This domain has been registered since 2016-03-08.
- Domain
- mastodon.social
- Registrar
- Gandi SAS
- Registered
- 2016-03-08
- Age (days)
- 3769
- Expires
- 2027-03-08
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
100/100
No tracking cookies or third-party trackers detected.
- Domain
- mastodon.social
- Detected trackers
- Pages scanned
- 3
- Total cookies
- 0
- Third-party trackers found
- 0
- Tracking cookies
- Consent mechanism detected
- No
- Tracking cookies found
- 0
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
90/100
Network configuration is secure and well optimized.
- Domain
- mastodon.social
- Open ports
- Mixed content domains
- Pages scanned
- 4
- Redirect chain
- http://mastodon.social, https://mastodon.social/
- HTTP/2 support
- No
- HTTP/3 support
- Yes
- Open ports found
- 0
- Redirect loop detected
- No
- Mixed content resources
- 0
- Redirect chain length
- 1
- HTTP redirects to HTTPS
- Yes
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
100/100
No suspicious content detected on the page.
- Domain
- mastodon.social
- Cryptominer scripts
- Pages scanned
- 4
- External form domains
- External script sources
- Obfuscation patterns
- 0
- Cryptominers detected
- 0
- Suspicious iframe details
- External form targets
- 0
- Obfuscated code patterns
- External script domains
- 0
- Suspicious iframes
- 0
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
60/100
Some business data is missing or could not be verified.
- Domain
- mastodon.social
- Email address present
- No
- Phone number present
- No
- Terms and conditions present
- Yes
- Chamber of Commerce number found
- No
- Terms and conditions page
- /terms-of-service
- VAT number found
- No
- Physical address present
- No
- Pages scanned
- 5
- Return policy present
- No
- Privacy policy present
- Yes
- Privacy policy page
- /privacy-policy
- Contact details found
- 0
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
10/100
No reviews or trust seal found.
- Domain
- mastodon.social
- Kiyoh trust seal found
- No
- Trust seal present
- No
- Review sources
- Trustpilot page
- https://www.trustpilot.com/review/mastodon.social
- Trustpilot profile found
- No
- WebwinkelKeur trust seal found
- No
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
100/100
This domain was not found on any known fraud or phishing lists.
- Checked domain
- mastodon.social
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
100/100
Valid SSL certificate found (expires 2026-08-16).
- Expiry date
- 2026-08-16
- Issuer
- Let's Encrypt
- Subject
- mastodon.social
- Valid until
- 2026-08-16
- Valid from
- 2026-05-18
- TLS version
- TLSv1.3
- Serial number
- 0561886BE06125363181833FC658C4280C85
DNS & Server
Checks DNS records, server information and hosting details.
95/100
DNS records are properly configured.
- IP Address
- 151.101.1.55
- SPF record
- Yes
- IPv6 support
- Yes
- DMARC record
- Yes
- DNSSEC
- No
- MX Records
- smtp.google.com
- Nameservers
- ns1.exoscale.net, ns1.exoscale.ch, ns1.exoscale.com, ns1.exoscale.io
- IP Addresses
- 151.101.1.55, 151.101.129.55, 151.101.65.55, 151.101.193.55
- IPv6 Addresses
- 2a04:4e42:600::311, 2a04:4e42:200::311, 2a04:4e42::311, 2a04:4e42:400::311
Discovered subdomains (1)
About this website
Mastodon.social is the original server of the Mastodon social network, managed by Mastodon GmbH. This website is designed for the common good and provides users with a platform for social interaction without the typical commercial pressures of other social media. The site has various key safety and privacy features, including an SSL certificate and strong technology and privacy scores.
Key facts about mastodon.social include a perfect technology score (100), privacy score (100), and SSL score (100). This indicates a solid technical foundation and a strong focus on user privacy. However, there are some areas where the site has warnings, such as the business data rating, which has a score of 60.
What our scores mean for you
The high score of 95 means that mastodon.social is generally safe for users. However, the warning for business data indicates that there is a partial issue that may affect trust. This could mean that there is insufficient transparency regarding how the site is managed or how data is handled. Additionally, the low score for reviews (10) indicates a concrete risk for users. This may mean that there is little feedback or experiences from other users available, making it difficult to get a clear picture of the site.
Score evolution
This section is not applicable as there is no previous score available.
What this means
Verisite is an independent platform that runs automated trust checks on websites. This specific score of 95 means that visitors and customers can generally feel safe using mastodon.social, but they should be aware of the warnings and the low score for reviews. For the company itself, this indicates that there is room for improvement in transparency and customer feedback.
Frequently asked questions
Does mastodon.social have a valid SSL certificate?
Yes, mastodon.social has a valid SSL certificate, meaning the connection is secure.
Has mastodon.social ever been reported as fraudulent?
There is no evidence that mastodon.social has ever been reported as fraudulent.
How safe is my personal information on mastodon.social?
Mastodon.social has a high privacy score, meaning they protect users' personal information well.
Why is the review score so low?
The low review score indicates a lack of user feedback, which can pose a risk.
What does the warning for business data mean?
The warning for business data means there is a partial issue that may affect trust.
Can I trust mastodon.social for social interaction?
Yes, with a high score of 95, mastodon.social is generally trustworthy for social interaction.