Is pgmall.my legit? TrustSniffer's high-trust assessment: 77/100

Overview

The website is an established Malaysian online marketplace that connects shoppers with sellers across consumer retail categories, including fashion, electronics, household goods, health products, travel items, tickets, vouchers, and jewellery, with an apparent revenue model based on marketplace commissions, service fees, advertising, and transaction activity.

Scam/Impersonation Risk

No identity contradictions, brand impersonation, phishing behaviour, or confirmed threat-list matches were observed. The homepage presents a coherent retail proposition, while interactive testing found no hidden forms, external password submission, credential harvesting, cloaking, wallet-draining behaviour, or clipboard manipulation. One isolated malicious classification among a much broader set of benign or undetected assessments is an unconfirmed reputational signal and does not outweigh the convergent evidence that this is a legitimate, established marketplace.

• The homepage consistently identifies the service as “PGMall.my” and describes it as a Malaysian online shopping marketplace.
• Automated interaction with the homepage completed successfully in 2 of 2 runs, with no cloaking, hidden forms, external password forms, or wallet-related activity detected.
• External reputation checks recorded no confirmed blacklist or phishing finding, no reported abuse, and only 1 malicious classification alongside 57 harmless and 34 undetected classifications.
• The domain was registered in 2016 and is approximately 10.4 years old; its registration runs from 7 March 2016 to 7 March 2031.

Regulatory Verification Notes

The registration record associates the domain with Public Gold Marketing Sdn. Bhd., although registrant-contact privacy is enabled as an administrative measure. The available homepage extract does not establish whether separate corporate, seller-governance, consumer-protection, privacy, refund, or dispute-resolution disclosures are published elsewhere on the site. No financial-services licence is claimed, but the observed business is conventional e-commerce rather than a regulated investment or brokerage offering; the absence of such a claim is therefore not a scam indicator.

• The domain-registration record names “PUBLIC GOLD MARKETING SDN. BHD.” as the organisation and Exabytes Network Sdn Bhd as registrar.
• The supplied homepage content is a product-category catalogue and does not display legal, licensing, contact, or transaction-policy details within the captured extract.
• The homepage contains no cryptocurrency, investment, brokerage, staking, or financial-return proposition.
• No matching broker profile was identified in the supplied third-party broker-intelligence context; this is reputational context, not a licensing determination.

What to Verify Next

Enterprise onboarding should confirm that the contracting merchant name, checkout payee, invoice issuer, returns process, privacy notice, and seller-dispute mechanism are consistent with the marketplace identity. For material procurement, payment teams should also validate the official customer-service channels independently and review seller-specific fulfilment protections before authorising a transaction.

• The homepage describes a marketplace connecting shoppers with third-party sellers, making seller identity and fulfilment terms relevant to transaction due diligence.
• The captured page does not show pricing or fee terms for the marketplace’s transaction-related revenue model.
• The visible catalogue includes both physical merchandise and fulfilment-sensitive items such as e-tickets, vouchers, and travel products.

Summary Verdict

The website is legitimate, established, and trustworthy, supported by a long operating tenure, meaningful global traffic presence, coherent commercial content, clean behavioural testing, and an absence of confirmed contradictory threat signals. Normal interaction, including account login and standard marketplace use, is appropriate.

Infrastructure Integrity

The site is served through Microsoft Corporation infrastructure with CDN/WAF protection. The observed address is an edge endpoint rather than a directly exposed origin, which reduces infrastructure exposure but is treated as a security control rather than independent proof of legitimacy. Transport encryption is valid and uses domain validation from a recognised certificate authority.

• The hosting infrastructure is served from AS8075 (Microsoft Corporation), with observed edge IP address 52.163.231.212 in the United States.
• The TLS certificate was issued by Sectigo Public Server Authentication CA DV R36 with DV validation and is valid until 12 February 2027.
• The domain has an established traffic footprint at rank 184,593 within the global top one million.

Closing Assessment

Prospective users may proceed with normal marketplace interaction, applying ordinary e-commerce controls such as checking the selected seller, order terms, payment beneficiary, and purchase protections before completing material transactions.