---
title: "Is gninepal.org a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "gninepal.org"
verdict: "Critical Risk"
title: "Is gninepal.org a Scam? Trust Score 0/100"
trust_score: 0
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/gninepal.org
assessed: 2026-08-20
---

# Is gninepal.org a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** gninepal.org shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-08-20 by automated analysis. Classification confidence 55%.

| Field | Value |
| --- | --- |
| What this site appears to be | Good Neighbors International Nepal NGO site describing mission, programs (child protection, education, public health, social economy), news, contact details, address and subscription; appears informational and donation/partner-funded. |

## Evidence status and limitations


Evidence completeness: UNKNOWN

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 4 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0 reports (AbuseIPDB; shared hosting inflates this count) | Noted |
| Domain age | 9.5 years old (Registered history) | Clear |
| Web archive | Archived since 2017 (Public history exists) | Clear |
| Certificate | Encrypted connection (Issued by YR1) | Noted |

## The page as captured


![Screenshot of the gninepal.org homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/gninepal.org/screenshots/first.png)

_What gninepal.org served when TrustSniffer captured it on 2026-08-20. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2017.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website presents itself as Good Neighbors International Nepal, an informational nonprofit platform describing programs in child protection, education, public health, and social economy, together with projects, publications, news, contact information, and subscription functionality. Its apparent model is donation-, grant-, partnership-, and program-funded NGO activity rather than commercial sales.


### Scam/Impersonation Risk

The site’s visible content is consistent with an NGO and does not show a login form, credential-collection form, wallet connection, or other obvious phishing mechanism. However, this benign presentation is materially outweighed by confirmed external threat detections and a confirmed blacklist status from multiple reputation sources. No separate identity inconsistency or direct brand-impersonation finding was observed, but the external reputation evidence creates a serious risk for sensitive interaction, particularly where donations, credentials, or other personal information could be involved.


Evidence:
- The homepage presents Good Neighbors International Nepal’s NGO mission, programs, projects, resources, and regional activities.
- The homepage contains contact and newsletter forms but no detected sensitive form, login form, hidden form, or external password-submission destination.
- External reputation assessment recorded 4 malicious detections and 1 suspicious detection, including a Tier-1 threat detection.
- The domain is blacklisted by external sources; Google Safe Browsing was recorded as not malicious, but that does not offset the confirmed blacklist findings.

### Regulatory Verification Notes

The site provides substantive program and organizational information, including child protection, education, public health, social economy, annual reports, stories, publications, and partner-related material. The available evidence does not independently verify the real-world operator identity, and the site’s licensing or formal registration status is unclear. For an NGO or donation-oriented organization, the absence of a clearly evidenced registration or authorization disclosure is a transparency gap requiring independent confirmation; it is not, by itself, proof of fraud. The site’s domain history and transport security indicate technical continuity, but those signals do not resolve the external reputation concern or establish legal standing.


Evidence:
- The about and program pages identify the organization as “GNI-Nepal” and describe its mission, approaches, projects, and partner-facing activities.
- The domain was registered in 2017 and is approximately 9.46 years old; the registrar is WORLDWIDE DOMAIN REGISTRY LIMITED.
- Hosted on AS204800 (WHG-SGP - WHG Hosting Services Ltd, GB).
- TLS certificate issued by YR1 with DV validation, valid to 2026-10-16T04:03:25+00:00.

### What to Verify Next

Before any sensitive interaction, an institution should independently confirm that the organization named on the site is registered with the relevant Nepalese authority and that any donation or partnership process is authorized by that entity. Contact details and payment instructions should be validated through an independently sourced organizational record or offline channel rather than relying solely on the website. Any proposed transfer should use payment protections that permit dispute or recovery, and credentials should not be reused for this service.


Evidence:
- The contact page provides an address and organizational contact details that can be compared with independently sourced records.
- The resources area identifies annual reports, publications, strategies, and public announcements that may support entity and funding verification.
- The site exposes two forms classified as contact and newsletter forms, with no detected sensitive form.

### Summary Verdict

The website has a **critical trust posture** for sensitive interaction. Although its presentation and technical continuity resemble a functioning nonprofit information site, confirmed external detections and blacklist status dominate the assessment, while the real-world operator remains unverified. Read-only review is the only supported use case under the available evidence.


### Infrastructure Integrity

The site resolves directly to one likely origin address rather than a detected CDN edge, with hosting provided by WHG-SGP - WHG Hosting Services Ltd in the United Kingdom on AS204800. This infrastructure is identifiable and technically resolved, but it provides no independent assurance of legitimacy and does not mitigate the external reputation findings.


### Closing Assessment

Prospective users and institutions should limit activity to non-interactive review until the organization, contact channels, and any proposed financial process have been independently validated through authoritative records.


_Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.

### 01 Governance Risk
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

### 02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor. (Analysis engine `signal:direct_threat`)
- A large share of what the page loaded came from other domains. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_MODERATE`)
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 50% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of gninepal.org.

- The request stayed on gninepal.org. It was not redirected to another domain. (Clear)
- Registration is published under WORLDWIDE DOMAIN REGISTRY LIMITED. (Clear)
- DNS for this domain is served by ymchost.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-03-07. (Noted)
- The earliest public archive of this site is from 2017-04-20. (Clear)
- It is hosted on WHG-SGP, from a server in GB. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | WORLDWIDE DOMAIN REGISTRY LIMITED |
| Hosting | WHG-SGP - WHG Hosting Services Ltd, GB |
| Country | GB |
| Server IP | 209.42.27.189 |
| Name servers | ns1.ymchost.com, ns2.ymchost.com |
| SSL issuer | YR1 |
| SSL expiry | 2026-10-16 |
| Domain age | 9.46 years (continuous registration) |
| Domain expiry | 2027-03-07 |
| Archive first seen | 2017-04-20 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 4 flagged \| AbuseIPDB: 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


A trust score summarises the evidence TrustSniffer could collect about gninepal.org at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [vechain.org risk report](https://trustsniffer.com/report/vechain.org) (Critical Risk, 5/100)
- [musk-trade.org risk report](https://trustsniffer.com/report/musk-trade.org) (Critical Risk, 0/100)
- [198macros.org risk report](https://trustsniffer.com/report/198macros.org) (Critical Risk, 0/100)
- [breezeclient.org risk report](https://trustsniffer.com/report/breezeclient.org) (Critical Risk, 0/100)
- [prestige-client.org risk report](https://trustsniffer.com/report/prestige-client.org) (Critical Risk, 3/100)
- [polinexclient.org risk report](https://trustsniffer.com/report/polinexclient.org) (Critical Risk, 0/100)
- [skyblock-extras.org risk report](https://trustsniffer.com/report/skyblock-extras.org) (Critical Risk, 5/100)
- [espaceaquatique-lernee.fr risk report](https://trustsniffer.com/report/espaceaquatique-lernee.fr) (Critical Risk, 0/100)
- [ambient-mdk.rs risk report](https://trustsniffer.com/report/ambient-mdk.rs) (Critical Risk, 5/100)
- [bluewater.co.ug risk report](https://trustsniffer.com/report/bluewater.co.ug) (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory)
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains)
- [Check another website](https://trustsniffer.com/web-intelligence)
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk)
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats)

## Guides
- [Stablecoin Freezes, Sep 24, 2026: 26 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-09-24)
- [Exchange Froze Account After USDT Deposit](https://trustsniffer.com/blog/exchange-froze-account-after-usdt-deposit)
- [How to check if a USDT address is blacklisted](https://trustsniffer.com/blog/how-to-check-if-usdt-address-is-blacklisted)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/gninepal.org) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/gninepal.org · assessed 2026-08-20.*