qunfamao.cc
Category: Suspicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of qunfamao.cc
qunfamao.cc appears to host a page styled as an official Indian government tax notice. The visible content uses Hindi and English text, displays Income Tax Department and Ministry of Finance branding, and presents what looks like a compliance or penalty memorandum instructing the visitor to download documents. Based on the page title and screenshot, the site appears designed to resemble a government communication rather than a typical commercial or informational website.
The domain name itself does not appear to match an official Indian government naming pattern, which would more commonly use a government-controlled domain structure. The page also includes a download prompt and references an external domain, suggesting the site may function primarily as a lure page intended to direct users to additional content or files rather than as a legitimate public-service portal.
Safety Assessment for qunfamao.cc
Multiple scan signals indicate elevated risk at the time of this scan. The domain was flagged by 12 out of 91 security engines, with several classifying it as phishing or fraud-related. The page content also appears to imitate an Indian government tax notice while using a non-government domain, which may indicate an attempt to mislead visitors into trusting the page. In addition, the malware scan flagged the site's main page and identified a linked external domain as malicious.
Blacklist and reputation data were mixed but still concerning. Major content-malice databases did not report the domain at the time of this scan, but the domain's IP address was listed on one mail-reputation blocklist, and one additional blacklist source also returned a suspicious listing. The domain is also relatively new, unranked, and presents a document-download prompt, all of which may increase risk in the context of a government-themed page.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was using a valid SSL certificate issued by TrustAsia Technologies, with expiry listed as 2026-10-27. It was hosted on an nginx web server at IP address 15.206.27.130, which maps to AWS EC2 infrastructure in Mumbai, India. The domain uses nameservers on ONCLOUDDNS and, at the time of this scan, DNSSEC was not enabled.
From a security perspective, the main concerns were not the TLS setup itself but the surrounding indicators: a young domain age, unsigned DNSSEC status, malicious detections on the landing page, and a flagged outbound reference to another suspicious domain. Those factors may be more relevant to risk assessment than the presence of HTTPS alone.
Share your experience with this website. Was it safe? Did you encounter any issues?