Smile.unp.ac.id presents itself as a learning portal for Universitas Negeri Padang, but the evidence doesn't match a legitimate academic platform. The most concerning finding is that the domain itself cannot be found in the WHOIS registry — a red flag that normally signals a recently registered or misconfigured domain. For comparison, every Indonesian university domain (.ac.id) has clear registration records tied to the institution. Additionally, the site has no contact page, no about page, and no privacy policy or terms of service. That matters because the homepage invites users to log in, meaning it likely handles credentials and personal data. Without those legal documents, there is no stated commitment to how your information is used or protected. The site also has no history in the Wayback Machine, so there is no track record to evaluate. While the security setup (SSL, clickjacking protection) is decent, those basics don't outweigh the missing ownership transparency. If you are a student or staff member considering whether smile.unp.ac.id is safe to use, the biggest question is: who really operates this domain? Until there is public, verifiable ownership information, the safest move is to treat this platform with caution and verify directly with your university whether it is an official resource. No smile.unp.ac.id reviews from independent sources exist yet, which for a login-based educational site is not reassuring.
No — smile.unp.ac.id doesn't look safe
In plain English
Something is off here. The domain can't be found in the WHOIS registry, which is highly unusual for an official .ac.id address. Combined with no contact info, no privacy policy, and no web history, this site doesn't act like a legitimate university platform despite looking like one. I'd keep your credentials away from it until there's proof of who's behind it.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
Good baseline security: valid SSL certificate, modern TLS, and clickjacking protection are all present. The site also publishes a security.txt file for vulnerability reporting, which is a positive signal. No malware or phishing flags.
The WHOIS record returns 'Domain Not Found,' which is unusual and concerning for any site, even an academic one. This means the registration details are completely hidden or the domain wasn't found in the registry — neither is normal for a legitimate .ac.id domain and creates real opacity around who operates this site.
The domain has no history in the Wayback Machine, suggesting it is very new. It is not blacklisted or flagged by Google Web Risk, but the complete lack of a web footprint is a yellow flag. Without any track record, there's nothing to point to for reliability.
No about page, no contact information, no social media presence, and no legal entity disclosure. For an educational platform that asks users to log in, this is a significant gap. Visitors cannot verify who runs the site or how to reach them with problems.
The site is missing both a privacy policy and terms of service. For a platform that likely collects login credentials and personal data, this is a real compliance problem. Even for an academic project, handling user accounts without these documents is a red flag.
DNS is working and the site loads, but there are no email servers configured, no DNSSEC, and no sitemap. The hosting is on the university's own network, which is credible, but the setup is sparse and lacks the redundancy or security hardening you'd expect from a platform storing user accounts.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.