njifjuhgh[.]top
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of njifjuhgh[.]top
The domain njifjuhgh[.]top appears to host a page presenting itself as an official notice from Lembaga Hasil Dalam Negeri Malaysia, the Malaysian Inland Revenue Board. Based on the screenshot and page title, it is styled as a formal tax-compliance or document-request notice, using government-themed branding, official-looking formatting, and urgent language about a 72-hour response window.
However, the domain name itself does not appear consistent with a typical government web address, and it does not match the official organization name shown on the page. The content therefore appears to be attempting to mimic a Malaysian government tax notice rather than operating as a clearly attributable official government service. Based on the available evidence, this site may be intended to solicit documents or sensitive information from recipients under the appearance of an official tax request.
Safety Assessment for njifjuhgh[.]top
Several risk indicators were present at the time of this scan. The site was flagged by 13 out of 92 security engines, with detections broadly describing it as phishing, malware, suspicious, or spam-related. In addition, the page content appears to imitate a Malaysian tax authority notice while using an unrelated, newly registered .top domain with a random-looking name, which is a pattern commonly associated with deceptive campaigns.
The domain is only 42 days old, has no established popularity ranking, and uses urgency cues such as an action deadline within 72 hours. Although major blacklist databases checked here did not list the domain at the time of this scan, blacklist status can lag behind newly deployed phishing pages. The combination of multi-engine detections, government-style impersonation cues, and the mismatch between the claimed institution and the actual domain materially increases concern.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served through Cloudflare infrastructure and presented a valid Let's Encrypt SSL certificate at the time of scanning. A valid certificate indicates encrypted transport, but it does not verify that the operator is legitimate. The domain uses Cloudflare nameservers, resolves to a Cloudflare IP in Toronto, and has DNSSEC listed as unsigned.
From a technical-risk perspective, the strongest concerns are not the TLS setup but the surrounding indicators: a very recent registration date, an unsigned DNSSEC status, a random-looking domain string, and content that appears inconsistent with the claimed government identity. Malware scanning flagged the main page as suspicious, though external links and referenced domains were limited in this sample.
Share your experience with this website. Was it safe? Did you encounter any issues?