Verdict
mpksmpg.com.my is low-trust and potentially risky.
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
| What this site appears to be | Official-looking regional charity site (MPKSM Pulau Pinang) with mission, objectives, award descriptions, contact details and procedural guidelines. No forms or financial solicitations visible on captured page. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 6 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 8.2 years oldRegistered history | Clear |
| Web archive | Archived since 2021406 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2021.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This is an informational regional nonprofit website presenting the mission, objectives, services, awards, membership-related material, contact details, and procedural guidance of Majlis Pusat Kebajikan Semalaysia Negeri Pulau Pinang (MPKSM Pulau Pinang), with an apparent purpose of supporting charitable outreach and public or government assistance.
Scam/Impersonation Risk
The captured pages do not show login forms, payment forms, wallet connections, financial products, or overtly deceptive content, and no page-level brand impersonation or conflicting legal identity was identified. However, this benign presentation is outweighed by confirmed external contradiction signals: six malicious detections and a confirmed blacklist hit from multiple external reputation checks. The site should therefore be treated as potentially compromised, misclassified, or otherwise unsuitable for sensitive interaction despite its charity-oriented appearance. The domain also has substantial registration continuity and archival presence, which supports technical persistence but does not neutralize the current reputation findings.
- The homepage presents MPKSM Pulau Pinang’s mission, objectives, services, awards, and support-related activities without a sensitive submission form.
- External reputation checks recorded 6 malicious detections and a confirmed blacklist hit; no Google Safe Browsing malicious result was recorded.
- The domain was registered on 2018-06-18 and is approximately 8.18 years old; archival coverage contains 406 snapshots from 2021-12-16 through 2026-06-12, spanning 6 tracked years.
Regulatory Verification Notes
The organizational and service pages identify the site as MPKSM Pulau Pinang and describe a regional charitable mission, including a claim that the organization was established almost six decades ago. The available evidence is consistent with a functioning informational nonprofit site, but the real-world operator identity is not independently verified. The captured pages do not present a license or registration number; for a charitable organization, that is a disclosure and verification gap rather than proof of misconduct. The domain is registered through Exabytes Network Sdn Bhd, while the registrant organization recorded in registration data is Majlis Pusat Kebajikan Semalaysia (MPKSM) Cawangan Negeri Pulau Pinang. The confirmed external reputation contradiction remains the decisive regulatory-risk consideration.
- The organizational pages identify “Majlis Pusat Kebajikan Semalaysia Negeri Pulau Pinang” and describe its mission, objectives, services, and awards.
- Registration data lists Exabytes Network Sdn Bhd as registrar and the organization as Majlis Pusat Kebajikan Semalaysia (MPKSM) Cawangan Negeri Pulau Pinang.
- The site’s transport encryption uses a DV certificate issued by YR2, valid until 2026-10-09 07:54:11 UTC.
What to Verify Next
Before any sensitive interaction, an independent party should confirm that the domain is authorized by MPKSM Pulau Pinang through an official organizational registry or an independently sourced telephone number. Any donation, membership, or support request should be matched against documentation obtained through an offline or independently verified channel, and the relevant charitable registration requirements should be checked with the applicable Malaysian authority. The confirmed reputation findings should also be escalated to the organization or hosting provider for clarification before access is expanded beyond public reading.
- The homepage and organizational pages provide the stated institutional name, mission, objectives, and service directory needed for independent comparison.
- The contact material supplies organizational contact details that can be checked against an independently sourced directory or registry.
- The site contains no captured forms, login interface, or external sensitive-data submission destination.
Summary Verdict
The overall posture is low trust with elevated sensitive-interaction risk. Although the website presents coherent, informational nonprofit content and shows signs of technical continuity, confirmed external threat findings prevent a positive legitimacy conclusion. The operating identity remains unverified.
Infrastructure Integrity
The site is protected by Cloudflare CDN/WAF infrastructure, which is a mitigating control against direct exposure but is not evidence of legitimacy; the analysis observed only a CDN edge address and no independently visible origin server. The hosting environment is associated with WHG Hosting Services Ltd in Great Britain.
- The site is behind Cloudflare CDN/WAF protection, with 1 observed edge IP and 0 observed origin candidates.
- The hosting infrastructure is served from AS204800, WHG-SGP - WHG Hosting Services Ltd, GB.
- The observed edge address is 192.250.235.19.
Closing Assessment
Public informational access may be retained for limited reference, but credentials, account creation, donations, membership payments, and other sensitive interactions should be withheld until the domain’s authorization and the external reputation findings have been independently resolved.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE - The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of mpksmpg.com.my.
- The request stayed on mpksmpg.com.my. It was not redirected to another domain. Clear
- Registration is published under Exabytes Network Sdn Bhd. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-06-18. Noted
- The earliest public archive of this site is from 2021-12-16. Clear
- It is hosted on WHG-SGP, from a server in GB. Noted
Domain intelligence
| Registrar | Exabytes Network Sdn Bhd |
|---|---|
| Hosting | WHG-SGP - WHG Hosting Services Ltd, GB |
| Country | GB |
| Server IP | 192.250.235.19 |
| Name servers | camilo.ns.cloudflare.com, kiki.ns.cloudflare.com |
| SSL issuer | YR2 |
| SSL expiry | 2026-10-09 |
| Domain age | 8.18 years (continuous registration) |
| Domain expiry | 2027-06-18 |
| Archive first seen | 2021-12-16 |
| Archive snapshots | 406 |
| Reputation | VirusTotal: 6 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about mpksmpg.com.my at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.