pop.rdi.sh is a small personal blog run by someone clearly interested in low-level security topics like ROP (return-oriented programming) exploits. If you're wondering whether pop.rdi.sh is a scam, the answer is no — it's exactly what it looks like: a hobby site where the author posts about technical subjects. There is no e-commerce, no login system, and no data collection. For a personal blog, the security setup is solid (modern encryption, clean blacklist status), and the site has been around for years based on its post history. Pop.rdi.sh reviews from a trust perspective are straightforward: there's nothing to steal or compromise here. If you follow the blog for its technical content, you can do so without worry. Just keep in mind that like most personal sites, there's no contact page or legal boilerplate — that's normal, not a red flag.
In plain English
This is a legitimate personal blog about security research, not a business or store. It has a valid SSL certificate, no blacklist flags, and an About page that explains what it is. For a hobby site, everything looks fine — there's nothing here to be suspicious about.
Where the score comes from
Modern TLS and a valid certificate from a well-known issuer, with no blacklist flags. This is better-than-average for a personal blog.
WHOIS data is hidden, which is standard for a personal site. The domain has been around since at least 2020, consistent with the content history.
No blacklist entries, no Google Safe Browsing warnings, and a small but consistent posting history since 2020. No external trust signals, but none are expected for a hobby blog.
An About page exists, and the site clearly describes itself as a personal blog about ROP gadgets. No contact page or social links, but that's normal for a one-person hobby project.
No privacy policy or terms of service, but this is a non-commercial blog with no data collection. Compliance obligations don't apply here.
Fast load times, a reliable hosting provider (Hetzner), and a clean server setup. Lacks some security headers and DNSSEC, but these are optional for a static blog.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →