Verdict
kedahccci.org.my appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Regional Chinese Chamber of Commerce site (Kedah) with navigation for membership, board, events, services and charity; primarily informational and community-focused. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 18 years oldRegistered history | Clear |
| Web archive | Archived since 2009Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2009.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Overview
This website is the online presence of the Kedah Chinese Chamber of Commerce, a regional community and business association in Malaysia. It presents information about the chamber, its board, membership applications, events, community services, venue rental, business-support letters, charitable activities, and contact channels, with Chinese and English navigation.
Scam/Impersonation Risk
No contradictions were observed. The homepage and associated navigation describe a coherent chamber-of-commerce and community-association purpose rather than an investment, e-commerce, or cryptocurrency operation. The site presents membership, events, venue rental, visa-support letters, and charitable activities, while technical observation found no phishing indicators, hidden forms, wallet activity, suspicious scripts, or external data-posting behavior. Available external reputation checks identified no malicious or suspicious findings, although reputation coverage was partial; this supports an apparently legitimate, low-risk presentation without independently proving the real-world operator’s identity.
- The homepage identifies the organization as “吉打中华总商会” and presents chamber history, membership, board, events, services, charity, and contact navigation.
- Behavioral inspection recorded 0 external XHR/fetch requests, 0 external posts, 0 hidden forms, 0 password-external forms, and 0 wallet-drainer runs across 2 successful runs.
- The domain was registered in 2009 and is approximately 17.56 years old; archival records contain 40 snapshots spanning 2009–2025, covering 17 tracked years.
Regulatory Verification Notes
The available pages are consistent with a regional association and provide organizational sections for the chamber overview, board, membership, activities, services, charity, and contact. No regulated financial or investment service is presented, and no license or regulatory registration number is claimed in the supplied content; this is a transparency point for ordinary organizational verification rather than evidence of a scam. The real-world operator identity remains independently unverified, so the site’s apparent legitimacy should not be treated as proof of a specific legal entity. No matching adverse broker-reputation record was identified.
- The about, board, membership, and contact sections provide organization-focused content and membership documentation rather than regulated financial-service disclosures.
- The domain registrar is Exabytes Network Sdn Bhd; the organization field is “eSurge Network,” with the registrant marked “REDACTED FOR PRIVACY.”
- Hosting telemetry identifies AS46015, EXABYTES-AS-AP – Exa Bytes Network Sdn.Bhd., MY.
- The site’s TLS certificate is issued by YR1, uses Domain Validation (DV), and is valid to 2026-10-19 03:14:08 UTC.
What to Verify Next
Before credential or payment interactions, an independent party should confirm the chamber’s legal identity and contact details through an applicable Malaysian business or association registry and, where relevant, confirm any membership or event-fee terms directly with the organization. Payment arrangements should be checked for clear recipient details, documented receipts, cancellation or refund provisions, and available payment protection. Contact channels should also be confirmed through an independent offline route rather than relying solely on information presented on the website.
- The contact section provides the site’s stated communication route for independent confirmation.
- The membership section includes a membership application form and chamber constitution, which can be compared with independently confirmed organizational details.
- The services section describes venue rental, business-travel-card assistance, visa recommendation letters, and certificates of origin, providing specific subjects for transaction and authorization checks.
Summary Verdict
Available evidence is consistent with an established, apparently legitimate website with a high-trust, low-risk posture and no observed scam or impersonation contradictions. The classification supports ordinary informational use, while the absence of independent operator verification means identity assurance remains qualified rather than proven.
Infrastructure Integrity
The site resolves directly to a likely origin host rather than through a detected CDN or WAF edge, so it does not receive the additional edge-layer mitigation those services can provide. This is a technical posture observation only and is not evidence of malicious activity; the valid TLS configuration and identified hosting environment remain supportive infrastructure signals.
- The infrastructure resolves to 1 unique IP, with 0 edge IPs and 1 likely origin IP.
- No CDN or WAF vendor was detected.
- The resolved service is located in Malaysia and uses the APNIC registry.
Closing Assessment
Normal browsing is proportionate to the available evidence; before submitting credentials or making payments, independent confirmation of the organization, transaction terms, and payment protections should be completed.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of kedahccci.org.my.
- The request stayed on kedahccci.org.my. It was not redirected to another domain. Clear
- Registration is published under Exabytes Network Sdn Bhd. Clear
- DNS for this domain is served by mschosting.com, across 2 name servers. Noted
- The registration is paid up to 2027-02-02. Noted
- The earliest public archive of this site is from 2009-02-12. Clear
- It is hosted on EXABYTES-AS-AP, from a server in MY. Noted
Domain intelligence
| Registrar | Exabytes Network Sdn Bhd |
|---|---|
| Hosting | EXABYTES-AS-AP - Exa Bytes Network Sdn.Bhd., MY |
| Country | MY |
| Server IP | 103.6.198.109 |
| Name servers | ns111.mschosting.com, ns112.mschosting.com |
| SSL issuer | YR1 |
| SSL expiry | 2026-10-19 |
| Domain age | 17.56 years (continuous registration) |
| Domain expiry | 2027-02-02 |
| Archive first seen | 2009-02-12 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about kedahccci.org.my at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.