Tiles.openrailwaymap.org is a tile server demo for OpenRailwayMap, likely a volunteer open-source project rather than a commercial service. That context matters because expectations for a hobby site are different from those for an online store or SaaS product. Still, even for a non-commercial project, the exposed .git directory is a significant oversight. It means anyone with a browser can access source files and potentially configuration details. The site also shows up on one email blacklist, which is odd for a server that doesn't handle email. On the positive side, the site has been around since 2021, uses modern encryption, and loads fast. But these security issues suggest the server isn't actively maintained. If you're looking for map tiles to use in a project, it's worth checking whether the maintainers have addressed these gaps. There are no tiles.openrailwaymap.org reviews or scam reports to go on, but the exposed files alone justify caution. A legitimate infrastructure project typically secures its configuration and responds to basic security warnings.
Not sure — double-check tiles.openrailwaymap.org first
In plain English
This site is a hobby tile server demo, not a business, but it still has some real problems. The exposed .git folder and a blacklist listing are warning signs that maintenance might be lax. It's probably fine for viewing map tiles, but don't treat it as a reliable or secure service.
Where the score comes from
The site uses modern encryption but has a critical security gap: an exposed .git folder that could leak source code or configuration. Combined with an expiring certificate and missing browser protections, this is a real weakness even for a non-commercial project.
The domain has been active for several years based on archive records, but who owns the project isn't clear. For a hobby or open-source tile server, that level of anonymity is expected and not a red flag.
The site has been around since 2021 and isn't flagged by Google as harmful, but it does appear on one email blacklist. That's unusual for a site that doesn't send email, and combined with the exposed files, it suggests the server may not be well maintained.
There's no about page or contact information, which is normal for a hobby project or technical demo. The site doesn't pretend to be a business, so the lack of transparency isn't deceptive.
No privacy policy or terms of service exist, but this is a non-commercial tile server demo, not a service that collects data or sells anything. That's completely appropriate for this kind of site.
Page load is fast and the hosting provider is reputable, but the server has several issues: an exposed .git directory, no security headers to protect users, and it blocks all search crawlers, which limits discoverability and makes the exposed files harder to notice.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →