.info domain, SSL cert but no HSTS, email list subscription posts to non-SSL endpoint, empty forums. Is this real? WHOIS info appears real and it's over a year old, but still...