UKM.my is the online home of Universiti Kebangsaan Malaysia, one of the country's oldest public universities. With a domain registered nearly three decades ago and clean security checks, it's clearly not a scam or fake site. Most universities maintain strong transparency — UKM does that by displaying contact info and an about page. However, the site is missing a standard privacy policy and terms of service, which would be expected for any official institutional website. Also notable: the domain expires in less than a month. While a university is almost certain to renew, a lapse could temporarily knock the site offline. The site also loads 16 external scripts, more than average for an education domain — this could be analytics, social media widgets, or ad trackers. If you're a student or visitor, your personal data handling isn't clearly explained, so be mindful of what you share. Overall, UKM.my is legitimate but has a few technical and compliance gaps that keep it from being a top-tier trustworthy site. For routine browsing and information, it's fine. For submitting sensitive information, look for a secure portal with its own privacy notice.
In plain English
UKM's official website is a legitimate, decades-old university domain. There are no major red flags like malware or blacklisting. The main reasons for caution are the domain expiring very soon and a missing privacy policy, plus a heavy load of external scripts that could affect privacy.
Where the score comes from
Solid certificate with modern encryption and strict HTTPS enforcement. No malware or phishing flags. The only gap is limited browser protections beyond HTTPS, but that's typical for many institutional sites.
Domain registered 29 years ago to Universiti Kebangsaan Malaysia — a clear, verifiable public entity. The WHOIS is redacted for privacy, which is normal. The main issue is the domain expiring in 22 days, which could cause disruption if not renewed.
Clean on all blacklists, moderate traffic rank, and decades of web history. No negative signals from Google or external sources. This is a well-established domain.
The site has an about page, visible contact information, and links to four social media platforms. It's easy to understand who runs it and how to reach them — exactly what you'd expect from a public university.
Missing privacy policy and terms of service. For a university website that likely handles inquiries and maybe donations, this is a real gap. Most institutional sites in Malaysia and elsewhere do post these pages.
Email authentication is well configured. But the site loads 16 external scripts — double the typical amount for a university site — which raises a mild flag for potential third-party tracking or injection. DNSSEC is also not enabled.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →