Verdict
hasil.gov.my appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Official site of Lembaga Hasil Dalam Negeri Malaysia (HASiL) offering tax guidance, downloadable forms, e-services, contact details, and announcements. Appears to be an established government portal. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 18 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by Entrust OV TLS Issuing RSA CA 2 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
The website is the public-service portal of Lembaga Hasil Dalam Negeri Malaysia (HASiL), presenting tax guidance, downloadable forms, announcements, contact information, and online services such as e-invoicing, appointments, and electronic tax services; its apparent purpose is to support Malaysian taxpayers, employers, companies, and other organizations rather than provide a commercial service.
Scam/Impersonation Risk
No contradictions were observed. The homepage presents a coherent government-tax-authority identity, with structured institutional content covering individuals, companies, employers, tax forms, international tax matters, legislation, and public announcements. The site does not exhibit the reported phishing, brand-impersonation, malicious-content, or suspicious-business-model indicators, and its established public-service presentation is consistent with an apparently legitimate government portal. The available evidence supports normal informational use, while independent operator identity remains unverified.
- The homepage identifies “Lembaga Hasil Dalam Negeri Malaysia” and provides government tax guidance, forms, announcements, and support services.
- Page analysis recorded no red flags, no suspected brand impersonation, no login form, no hidden sensitive form, and no wallet or cryptocurrency activity.
- External reputation checks recorded zero malicious and zero suspicious detections, with the domain ranked 13,859 globally and within the top one million.
Regulatory Verification Notes
The site’s stated role is a public-sector tax authority, not a commercial financial or investment provider, so a commercial licence number is not presented as part of its business model. The available on-site disclosure is therefore best treated as a transparency point for institutional confirmation rather than evidence of misconduct. The homepage provides an institutional identity and extensive tax-service content, but the real-world operator connection has not been independently verified by the assessment. No third-party broker match or adverse reputational signal was identified.
- Domain registration: 2008-03-17; age 18.42 years; registrar MYNIC Berhad.
- Hosting infrastructure: AS55951, LHDNM-MY - Lembaga Hasil Dalam Negeri Malaysia, MY.
- TLS certificate: Entrust OV TLS Issuing RSA CA 2; Organization Validation (OV); subject organization Lembaga Hasil Dalam Negeri; valid to 2027-01-30.
- The homepage title is “Lembaga Hasil Dalam Negeri Malaysia,” with content categorized as Government / Public Service.
What to Verify Next
Before credential or payment interactions, an organization should confirm the agency identity and official service channels through an independently sourced Malaysian government directory or an offline contact route, rather than relying solely on links encountered in unsolicited messages. Any electronic tax, appointment, or payment workflow should also be checked to ensure that the destination and payment instructions correspond to the intended government service. Where a transaction involves a third-party intermediary, its identity, terms, refund arrangements, and payment protections should be confirmed separately.
- The homepage supplies institutional contact and support information suitable for independent cross-checking.
- The site presents multiple public-service functions, including e-services, e-invoicing, appointments, forms, and taxpayer guidance.
- The page analysis found no sensitive form or untrusted form destination on the captured homepage.
Summary Verdict
The overall posture is high trust and low risk. Available evidence is consistent with an established, apparently legitimate government public-service website, with no observed scam, phishing, impersonation, or other contradictory signals. The conclusion supports ordinary use while preserving the qualification that the real-world operator identity has not been independently verified.
Infrastructure Integrity
The site is directly associated with LHDNM-MY infrastructure in Malaysia rather than a detected CDN edge, with likely origin hosting observed across three resolved IP addresses. This direct institutional hosting posture is a mitigating infrastructure signal, not independent proof of legitimacy.
Closing Assessment
Normal informational use is proportionate; before submitting credentials or making payments, ordinary independent confirmation of the official service channel and applicable payment protections should be completed.
Written analysis generated 2026-08-13 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 55/100 |
| Identity verification confidence | 30% |
- Identity verified on page
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of hasil.gov.my.
- The request stayed on hasil.gov.my. It was not redirected to another domain. Clear
- Registration is published under MYNIC Berhad. Clear
- DNS for this domain is served by co.uk, across 4 name servers. Noted
- The registration is paid up to 2027-03-17. Noted
- It is hosted on LHDNM-MY, from a server in MY. Noted
Domain intelligence
| Registrar | MYNIC Berhad |
|---|---|
| Hosting | LHDNM-MY - Lembaga Hasil Dalam Negeri Malaysia, MY |
| Country | MY |
| Server IP | 113.11.237.1 |
| Name servers | ns-1681.awsdns-18.co.uk, ns-6.awsdns-00.com, ns-866.awsdns-44.net, ns-1364.awsdns-42.org |
| SSL issuer | Entrust OV TLS Issuing RSA CA 2 |
| SSL expiry | 2027-01-30 |
| Domain age | 18.42 years (continuous registration) |
| Domain expiry | 2027-03-17 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about hasil.gov.my at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.