Analysis for

aig.my

Flare Score

Safe

FlareAI™ Summary

AIG Malaysia (aig.my) provides insurance services online, offering user accounts and payment processing. Security is reasonably sound, with a valid SSL certificate from DigiCert. The domain is hosted in the United States and maintains a clean blacklist status, verified by TRUSTED sources. Google Safe Browsing reports a CLEAN status. With a FlareScore of 75/100, the site is considered safe for general use, but users should always practice standard online safety precautions.

-2.9%

than category average

United States

Server Country

Unknown

Domain Age

Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from DigiCert Inc

SSL certificate valid for 10+ months

Not found on any blacklist (1 sources checked)

Modern security headers configured (HSTS, CSP)

Good website performance

Active social media presence

Contact information available

Uses CDN for better performance and security

Negative Signals

Very new domain (less than 3 months old)

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

100/100

✓ Valid SSL (40) ✓ HSTS (20) ✓ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

DigiCert Inc

Valid From

Dec 23, 2025

Valid Until

Dec 22, 2026

249 days remaining

Security Headers

HSTS

CSP

X-Frame-Options

How Was This Calculated?

Transparency into our FlareScore™ methodology and data sources used for this analysis.

aig.my Analysis

FlareScore™: 75/100 (Safe Risk)

Our analysis of aig.my identified 8 positive security indicators and 1 potential concerns. The FlareScore™ rating combines technical security measures, domain reputation, and content analysis.

SSL Certificate Analysis

AI Content Review

14 DNS Records

Analysis Sources

• SSL: DigiCert Inc
• DNS: 14 records analyzed
• Content: Visual & text analysis

Last Checked

Mar 02, 2026
1 month ago

Transparency Note: Our analysis is based on publicly available data and automated scanning. For detailed methodology and accuracy metrics, visit our methodology page.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

TXT

                                                            v=spf1 include:%{d}.ac.spf-protect.agari.com exists:%{i}._i.%{d}._d.espf.agari.com -all
                                                        

SPF

                                                            zhk6r0xqxwdht2qhv6trr7rdfmhwqpl4
                                                        

                                                            1sp19k11l41ykcndmbsn4xkf6nhhdlqg
                                                        

                                                            8g5hk3h26jmr898vgd43lw9gtrmr6lqy
                                                        

                                                            _rp5nxrbkmlnw5nkbw9ialqqp2rum6py
                                                        

                                                            _slgrk7guc5kfp6wedturqa7hv86vevm
                                                        

                                                            cfrdj0h54yl6r14sylsrvcxrjnlhztfr
                                                        

                                                            t6kpt1mc92r1fgf6vchb95hzgc13fr9s
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (6)

HSTS

MIME Sniffing Protection

XSS Filter

Clickjacking Protection

Referrer Policy

Content Security Policy

Web Server

                                            Apache
                                        

Cache Status

                                            Hit from cloudfront
                                        

Proxy/CDN

                                            1.1 ffee1d974bd2e9d6...
                                        

Cache Policy

                                            max-age=7200,s-maxag...
                                        

{
    "server": "Apache",
    "date": "Mon, 02 Mar 2026 11:24:58 GMT",
    "content-type": "text\/html",
    "content-length": "231",
    "location": "https:\/\/www.aig.my\/home",
    "x-iinfo": "46-167962958-167962965 NNNN CT(75 182 0) RT(1772450698107 10) q(0 0 2 0) r(3 4) U24",
    "strict-transport-security": "max-age=31536000;",
    "x-cdn": "Imperva",
    "incap-country-code": "FR",
    "x-cache": "Hit from cloudfront",
    "via": "1.1 ffee1d974bd2e9d67d5610f7ffb32b32.cloudfront.net (CloudFront)",
    "x-amz-cf-pop": "CDG54-P2",
    "x-amz-cf-id": "0kzjrk0S_Wavh5oqNVHv5mhGeqjKUQFt379SVes6Qzh_cRmpL8wWMQ==",
    "age": "9185",
    "last-modified": "Mon, 02 Mar 2026 09:10:33 GMT",
    "etag": "\"1c36f-64c06f58debc8\"",
    "accept-ranges": "bytes",
    "x-content-type-options": "nosniff",
    "x-xss-protection": "1; mode=block",
    "x-frame-options": "ALLOW-FROM https:\/\/www.fireflyz.com.my https:\/\/www.klook.com https:\/\/t1.fat.klook.io https:\/\/t2.fat.klook.io",
    "referrer-policy": "strict-origin-when-cross-origin",
    "feature-policy": "geolocation 'none';midi 'none';notifications 'none';push 'none';sync-xhr 'self' https:\/\/tdp.trustarc.com;microphone 'none';camera 'none';magnetometer 'none';gyroscope 'none';speaker 'self';vibrate 'none';fullscreen 'self';payment 'none';",
    "content-security-policy": "default-src 'self' https: data:; connect-src https: wss:;script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; frame-ancestors 'self' https:\/\/www.fireflyz.com.my; upgrade-insecure-requests;",
    "cache-control": "max-age=7200,s-maxage=14400"
}

IP Geolocation

Server location and network information

United States

Ashburn

IP Address

34.197.62.200

ISP / Hosting

Amazon.com, Inc.

Coordinates

39.0438, -77.4874

Country Code

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 include:%{d}.ac.spf-protect.agari.com exists:%{i}._i....

DMARC

v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:[email protected]....

Performance Metrics

Website loading speed and performance analysis

100

Fast

Load Time

0.34s

Excellent

Page Size

0.11MB

Optimized

Requests

Minimal

Overall

100/100

Performance score

Excellent! This website loads quickly and provides a great user experience.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.aig.my

Website Screenshot

In-Depth Analysis

Overview

AIG Malaysia, accessible at aig.my, provides insurance services online. The website likely allows users to log in, manage their accounts, and make payments for insurance policies.

Security Assessment

The website employs SSL encryption, validated by DigiCert Inc, ensuring secure communication until December 2026. This protects sensitive data transmitted between users and the server. The domain's CLEAN status on Google Safe Browsing is a strong positive signal, indicating no detected malware or phishing attempts. Hosting on Amazon.com, Inc. in the United States suggests a reliable infrastructure.

Trust Level

With a FlareScore of 75/100, aig.my presents a moderate risk level. While the SSL certificate and clean browsing status are reassuring, the absence of a publicly available privacy policy introduces uncertainty regarding data handling practices.

Recommendations

Users should exercise caution when sharing personal or financial information. While the site appears secure, the lack of a privacy policy warrants vigilance. It's advisable to:

Carefully review AIG's data handling practices through other available resources.
Use strong, unique passwords for your account.
Be wary of phishing attempts and verify any unusual requests.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

No reviews yet.

Is This Your Website?

Claim your profile to respond to reviews and build trust with your audience.