Verdict
undip.ac.id appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Official homepage for Universitas Diponegoro (UNDIP) containing navigation to faculties, research, news, announcements, admissions information, and contact details. Shows social links and SSO entry point; appears to be a standard institutional site. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 29 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Overview
The website presents itself as Universitas Diponegoro’s public university information portal, offering institutional profiles, faculties, research and journals, news, announcements, admissions information, student and alumni services, contact details, and access to an SSO entry point rather than operating as a direct commercial marketplace.
Scam/Impersonation Risk
No phishing, impersonation, blacklist, or other contradictory signals were observed. The homepage’s structure, institutional content, named academic units, leadership and research sections, and linked social presence are consistent with the Universitas Diponegoro identity. One automated page-similarity signal associated the content with un.org, but that signal was not corroborated by the site’s content and did not constitute an impersonation finding. The domain’s long registration history and clean external reputation further support an established-site assessment, although the real-world operator identity is not independently verified.
- Domain registration: 1997-06-26; age 29.15 years; registrar PT Radnet Digital Indonesia.
- The homepage identifies “Universitas Diponegoro” and provides navigation for institutional leadership, faculties, research, admissions, news, and services.
- External reputation checks recorded 0 malicious detections, 0 suspicious detections, and 0 abuse reports; traffic rank recorded as 19286.
Regulatory Verification Notes
The site’s apparent model is a public university information service, not a financial or investment platform. Its profile, history, leadership, faculty, research, admissions, and public-service content provide substantive institutional context. No financial licence claim or licence number appears in the supplied site content; this is a regulatory-disclosure point to confirm only if a proposed interaction involves a regulated service, fee, or credential transaction. Available evidence is consistent with an established, apparently legitimate academic website, while independently connecting the site to a real-world operator remains a qualified rather than proven conclusion.
- The homepage title is “Beranda - Universitas Diponegoro,” with content categories covering university profile, academic units, research, admissions, announcements, careers, and public services.
- The site links to Facebook, YouTube, X, Instagram, TikTok, and LinkedIn accounts.
- The site’s transport encryption uses a DigiCert Global G2 TLS RSA SHA256 2020 CA1 certificate with OV validation, subject organisation Universitas Diponegoro, valid through 2026-09-07.
What to Verify Next
For admissions, fees, employment, or other consequential interactions, independently confirm the relevant university department and contact channel using an offline or separately sourced institutional directory. Before using the SSO entry point, confirm that the destination is an expected university-controlled authentication service and that any payment request corresponds to published institutional instructions. Where a service could fall under a regulated activity, confirm the applicable registration or licensing position with the relevant authority.
- The homepage provides admissions, careers, contact, student services, international services, and IT-services pathways that can be cross-checked against independently obtained institutional information.
- The page analysis found no login form, sensitive form, hidden form, untrusted form destination, wallet connection, or cryptocurrency-related functionality.
- Browser testing recorded two successful runs with no cloaking, suspicious inline scripts, clipboard hijacking, wallet-drainer activity, or externally submitted password forms.
Summary Verdict
The overall posture is high trust and low risk, with evidence consistent with an established, apparently legitimate university website. No scam or impersonation contradiction was identified. The principal qualification is that the available evidence supports likely institutional identity rather than independently verified operator identity.
Infrastructure Integrity
The site resolves directly to one likely origin address rather than a detected CDN edge, with hosting associated with UNDIP-AS-ID – Universitas Diponegoro, Indonesia, on AS46049. No CDN or WAF vendor was detected; this is an infrastructure characteristic rather than evidence of maliciousness. The observed TLS deployment is a mitigating security control, while a low-level fast-flux-like DNS heuristic remains unconfirmed and does not alter the overall assessment.
- Hosting: AS46049, UNDIP-AS-ID – Universitas Diponegoro, ID; resolved IP 182.255.2.121; registry APNIC; country Indonesia.
- Infrastructure resolution recorded 1 unique IP, 0 edge IPs, and 1 likely origin IP.
- TLS certificate validation level: OV; issuer DigiCert Global G2 TLS RSA SHA256 2020 CA1; valid to 2026-09-07T23:59:59+00:00.
Closing Assessment
Normal browsing is proportionate to the assessment; before credential or payment interactions, ordinary independent checks of the institution, transaction terms, and payment protections should still be completed.
Written analysis generated 2026-08-13 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 80/100 |
| Identity verification confidence | 80% |
- Identity verified on page
- Trusted social count=4
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of undip.ac.id.
- The request stayed on undip.ac.id. It was not redirected to another domain. Clear
- Registration is published under PT Radnet Digital Indonesia. Clear
- DNS for this domain is served by ac.id, across 5 name servers. Noted
- The registration is paid up to 2027-10-01. Noted
- It is hosted on UNDIP-AS-ID, from a server in ID. Noted
Domain intelligence
| Registrar | PT Radnet Digital Indonesia |
|---|---|
| Hosting | UNDIP-AS-ID - Universitas Diponegoro, ID |
| Country | ID |
| Server IP | 182.255.2.121 |
| Name servers | a.ns.undip.ac.id, b.ns.undip.ac.id, c.ns.undip.ac.id, d.ns.undip.ac.id, ns.undip.ac.id |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2026-09-07 |
| Domain age | 29.15 years (continuous registration) |
| Domain expiry | 2027-10-01 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about undip.ac.id at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.