Is gninepal.org a scam? TrustSniffer's high-risk assessment: 0/100

gninepal.org
Download PDF Check another site How we score

Verdict

0 OUT OF 100
Critical Risk

gninepal.org shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Sensitive Interaction Risk Governance Risk

Assessed 2026-08-20 by automated analysis. Classification confidence 55%.

What this site appears to beGood Neighbors International Nepal NGO site describing mission, programs (child protection, education, public health, social economy), news, contact details, address and subscription; appears informational and donation/partner-funded.

Evidence status and limitations

Evidence completeness: UNKNOWN

  • The real-world operator identity was not independently verified.
  • Module-level completeness metadata is unavailable for this legacy report.

At a glance

The checks that decide most of this verdict.

Malware engines4 flagged itVirusTotalRisk
Google Safe BrowsingNot listedGoogleClear
Abuse reports on the host0 reportsAbuseIPDB; shared hosting inflates this countNoted
Domain age9.5 years oldRegistered historyClear
Web archiveArchived since 2017Public history existsClear
CertificateEncrypted connectionIssued by YR1Noted

The page as captured

https://gninepal.org/
Screenshot of the gninepal.org homepage captured during the TrustSniffer assessment
What gninepal.org served when TrustSniffer captured it on 2026-08-20. The page may look different now.

Key findings

  • Automated classification: Sensitive Interaction Risk.
  • Domain age: 3 to 10 years (registration continuity).
  • Public web-archive history exists since 2017.
  • At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

Full analysis

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website presents itself as Good Neighbors International Nepal, an informational nonprofit platform describing programs in child protection, education, public health, and social economy, together with projects, publications, news, contact information, and subscription functionality. Its apparent model is donation-, grant-, partnership-, and program-funded NGO activity rather than commercial sales.

Scam/Impersonation Risk

The site’s visible content is consistent with an NGO and does not show a login form, credential-collection form, wallet connection, or other obvious phishing mechanism. However, this benign presentation is materially outweighed by confirmed external threat detections and a confirmed blacklist status from multiple reputation sources. No separate identity inconsistency or direct brand-impersonation finding was observed, but the external reputation evidence creates a serious risk for sensitive interaction, particularly where donations, credentials, or other personal information could be involved.

Evidence
  • The homepage presents Good Neighbors International Nepal’s NGO mission, programs, projects, resources, and regional activities.
  • The homepage contains contact and newsletter forms but no detected sensitive form, login form, hidden form, or external password-submission destination.
  • External reputation assessment recorded 4 malicious detections and 1 suspicious detection, including a Tier-1 threat detection.
  • The domain is blacklisted by external sources; Google Safe Browsing was recorded as not malicious, but that does not offset the confirmed blacklist findings.

Regulatory Verification Notes

The site provides substantive program and organizational information, including child protection, education, public health, social economy, annual reports, stories, publications, and partner-related material. The available evidence does not independently verify the real-world operator identity, and the site’s licensing or formal registration status is unclear. For an NGO or donation-oriented organization, the absence of a clearly evidenced registration or authorization disclosure is a transparency gap requiring independent confirmation; it is not, by itself, proof of fraud. The site’s domain history and transport security indicate technical continuity, but those signals do not resolve the external reputation concern or establish legal standing.

Evidence
  • The about and program pages identify the organization as “GNI-Nepal” and describe its mission, approaches, projects, and partner-facing activities.
  • The domain was registered in 2017 and is approximately 9.46 years old; the registrar is WORLDWIDE DOMAIN REGISTRY LIMITED.
  • Hosted on AS204800 (WHG-SGP - WHG Hosting Services Ltd, GB).
  • TLS certificate issued by YR1 with DV validation, valid to 2026-10-16T04:03:25+00:00.

What to Verify Next

Before any sensitive interaction, an institution should independently confirm that the organization named on the site is registered with the relevant Nepalese authority and that any donation or partnership process is authorized by that entity. Contact details and payment instructions should be validated through an independently sourced organizational record or offline channel rather than relying solely on the website. Any proposed transfer should use payment protections that permit dispute or recovery, and credentials should not be reused for this service.

Evidence
  • The contact page provides an address and organizational contact details that can be compared with independently sourced records.
  • The resources area identifies annual reports, publications, strategies, and public announcements that may support entity and funding verification.
  • The site exposes two forms classified as contact and newsletter forms, with no detected sensitive form.

Summary Verdict

The website has a critical trust posture for sensitive interaction. Although its presentation and technical continuity resemble a functioning nonprofit information site, confirmed external detections and blacklist status dominate the assessment, while the real-world operator remains unverified. Read-only review is the only supported use case under the available evidence.

Infrastructure Integrity

The site resolves directly to one likely origin address rather than a detected CDN edge, with hosting provided by WHG-SGP - WHG Hosting Services Ltd in the United Kingdom on AS204800. This infrastructure is identifiable and technically resolved, but it provides no independent assurance of legitimacy and does not mitigate the external reputation findings.

Closing Assessment

Prospective users and institutions should limit activity to non-interactive review until the organization, contact channels, and any proposed financial process have been independently validated through authoritative records.

Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.

What the analysis found

2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.

01 Governance Risk

  • The public registration record for this domain is incomplete.Registration and ownership rule:KF_WHOIS_INCOMPLETE

02 Sensitive Interaction Risk

  • The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine signal:direct_threat
  • A large share of what the page loaded came from other domains.Behaviour in a sandbox rule:BEHAV_EXTERNAL_RATIO_MODERATE
  • An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation rule:EXT_BLACKLIST_CRITICAL

Identity verification

StatusUNVERIFIED
Identity score30/100
Identity verification confidence50%
  • No on-site identity signals detected

Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.

What TrustSniffer observed

First-party facts recorded during the assessment of gninepal.org.

  • The request stayed on gninepal.org. It was not redirected to another domain. Clear
  • Registration is published under WORLDWIDE DOMAIN REGISTRY LIMITED. Clear
  • DNS for this domain is served by ymchost.com, across 2 name servers. Noted
  • The registration is paid up to 2027-03-07. Noted
  • The earliest public archive of this site is from 2017-04-20. Clear
  • It is hosted on WHG-SGP, from a server in GB. Noted

Domain intelligence

RegistrarWORLDWIDE DOMAIN REGISTRY LIMITED
HostingWHG-SGP - WHG Hosting Services Ltd, GB
CountryGB
Server IP209.42.27.189
Name serversns1.ymchost.com, ns2.ymchost.com
SSL issuerYR1
SSL expiry2026-10-16
Domain age9.46 years (continuous registration)
Domain expiry2027-03-07
Archive first seen2017-04-20
Archive snapshotsNot counted (archive lookup incomplete)
ReputationVirusTotal: 4 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches

About this assessment

A trust score summarises the evidence TrustSniffer could collect about gninepal.org at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

Common questions about gninepal.org

Is gninepal.org a scam?

TrustSniffer's assessment of gninepal.org found strong scam indicators. It scored 0 out of 100 on 2026-08-20, which is the critical-risk band. The specific signals are listed in the evidence above.

Is gninepal.org safe to use?

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

What is the trust score of gninepal.org?

gninepal.org scored 0 out of 100 on 2026-08-20, which places it in the critical-risk band. The score is built from the domain's age and registration history, its hosting and certificate, the content of the site itself, and third-party reputation data. There is no human rating and no user review in it.

Download this report as PDF Free, no account needed. Create one to keep a history of the sites you check.
By AminRez, Founder & Lead Security Researcher, TrustSniffer
Produced by the TrustSniffer Analysis Engine · assessed 2026-08-20 · how we assess · report a mistake