I got an email from LHDN (noreply@hasil.gov.my) with title "LHDNM: Soal Selidik Kajian Pembangunan Model dan Modul Pelaksanaan Audit Komunikasi dan Keberkesanan Media untuk LHDNM"

Content is "Sila klik pada pautan berikut untuk sertai kajian https : / / rb.gy / upuoj ......"

https : / / rb.gy / upuoj (remove all space for the actual link)

I clicked on this link because the sender is "noreply@hasil.gov.my" which look like a safe sender. But the more I look at this link the more I find this link suspicious. Is this a normal link that LHDN will use? Or is it controlled by malicious third party?

Never click on the redirect crap.

Lhdn has no reason to hide the actual url from you.

If genuine and this is how they want to run their surveys, than they can sod off. I'm not cooperating.

Better safe than sorry.

Check the raw email content and you will see real email address.

When in doubt, do not click any link in email.

I already clicked on this link because the sender is safe, it's from noreply@hasil.gov.my. After I click then only I think this link look suspicious.

Now what should I do?

Just google form link, should be safe https://docs.google.com/forms/d/1ph12JYcZnD..._requested=true

soal selidik is questionaire right? if it is then just ignore

Dude, sender address can be spoofed lar. Most email clients won't let you change the sender field only, but if you know how to code and you wrote your own client you will notice the sender field is anything you want.

2023 still got people easily click link/qr code given ah