The site belongs to the security researchers who found the bug and worked with the OpenSSL maintainers and the various Linux distros to get patched versions out quickly -- the site is just the description of the bug (which is easily verifiable by anybody who can read the code) to lay it all out for people clearly and cleanly. They're pretty firmly white hat.