Verdict
penta.com.au shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Public website for Penta Properties offering property listings, property management, valuation services and contact information for offices in Australia and Indonesia. Includes standard login and password reset functionality and visible contact email/phone numbers. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 4 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 25 years oldRegistered history | Clear |
| Web archive | Archived since 2001453 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2001.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website presents itself as Penta Properties, an Australia- and Indonesia-focused real-estate agency offering properties for sale and rent, property management, valuation, project marketing, finance and home-loan referrals, together with office contact details and account-access functions.
Scam/Impersonation Risk
The site’s real-estate content is coherent and its pages do not show an obvious brand-impersonation pattern or conflicting legal identities. However, this benign presentation is outweighed by confirmed external threat detections and blacklist status: multiple security detections, including a Fortinet flag, identify the domain or associated infrastructure as malicious or suspicious. This is a material contradiction for any sensitive interaction, particularly because the site exposes login and password-reset functionality. No identity contradiction, direct phishing classification, or brand-impersonation finding was observed in the supplied page analysis, but the confirmed blacklist signal independently supports a clearly cautionary assessment.
- External reputation evaluation recorded 4 malicious and 1 suspicious detections, with Fortinet among the flagged vendors.
- The domain was marked blacklisted by two external sources; Google Safe Browsing was recorded as non-malicious.
- Registration continuity dates to 2001; domain age is 25.38 years.
- Web-archive records contain 453 snapshots spanning 2001-04-02 to 2026-03-15, covering 26 tracked years.
Regulatory Verification Notes
The website presents a conventional property-services model and identifies offices in Melbourne, Sydney and Jakarta, but the available site content does not provide a license number, regulator, or independently verifiable registration disclosure for its property, valuation or finance-related services. This is a regulatory-transparency gap rather than proof of fraud, but it is significant when combined with the external security findings. The available evidence connects the site to the Penta Properties name with some confidence, but does not independently verify the real-world operator’s identity or regulatory standing. No broker match was returned in the supplied third-party reputational context.
- The homepage and service navigation identify property sales, rentals, management, valuation, project marketing and finance/home-loan referrals.
- The site’s transport encryption uses a DV certificate issued by YR2, valid to 2026-10-24T07:26:40+00:00.
- Hosting infrastructure is served from AS216180, WHG-AUS - WHG Hosting Services Ltd, GB.
- The available legal and identity pages do not display a license number or named regulator for the described services.
What to Verify Next
Before any sensitive engagement, an independent party should confirm the operating entity and the authorization of the relevant Australian and Indonesian property or valuation activities through the applicable government or professional registries. Contact details should be validated through an independently sourced office number or other offline channel rather than relying solely on information presented by the website. Until the external security detections and blacklist status are resolved, interaction should remain limited to non-sensitive, read-only review; credentials, password-reset requests and financial information should not be submitted.
- The homepage displays login and password-reset forms while indicating that new user registration is disabled.
- The contact page and homepage present office phone numbers for Indonesia, Melbourne and Sydney.
- The About Us, Contact Us and Finance/Home Loans sections are the relevant pages for confirming the claimed operating entity and service scope.
- The site’s page analysis found no sensitive form beyond login and password-reset functionality, but the presence of account-access forms remains relevant to verification sequencing.
Summary Verdict
The website has a credible real-estate presentation and a long historical presence, but the overall trust posture is critical for sensitive interactions because confirmed external threat detections and blacklist status override the otherwise coherent page content. The apparent business identity remains unproven, and the available evidence does not support treating the site as suitable for credential or financial use.
Infrastructure Integrity
The site resolves directly to a single likely origin IP, with no CDN detected and no CDN/WAF layer identified as a mitigating control. This gives the hosting arrangement a straightforward technical posture, but infrastructure visibility does not offset the external reputation risk.
Closing Assessment
Prospective users and institutions should suspend credential, payment and other sensitive activity until the domain’s security reputation, operating entity and relevant authorizations have been independently cleared.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 73/100 |
| Identity verification confidence | 74% |
- Trusted social count=1
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of penta.com.au.
- The request stayed on penta.com.au. It was not redirected to another domain. Clear
- Registration is published under Melbourne IT. Clear
- DNS for this domain is served by mysecurecloudhost.com, across 4 name servers. Noted
- The earliest public archive of this site is from 2001-04-02. Clear
- It is hosted on WHG-AUS, from a server in GB. Noted
Domain intelligence
| Registrar | Melbourne IT |
|---|---|
| Hosting | WHG-AUS - WHG Hosting Services Ltd, GB |
| Country | GB |
| Server IP | 192.250.232.154 |
| Name servers | ns1.mysecurecloudhost.com, ns2.mysecurecloudhost.com, ns3.mysecurecloudhost.com, ns4.mysecurecloudhost.com |
| SSL issuer | YR2 |
| SSL expiry | 2026-10-24 |
| Domain age | 25.38 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2001-04-02 |
| Archive snapshots | 453 |
| Reputation | VirusTotal: 4 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about penta.com.au at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.