labor-day-51gb-free8.jcs11[.]top
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of labor-day-51gb-free8.jcs11[.]top
The domain labor-day-51gb-free8.jcs11[.]top appears to host a promotional landing page claiming that Filipino workers have received "51GB FREE Data" for Labor Day. Based on the page title, screenshot, and linked resources, the site appears to be designed as a giveaway-style campaign page rather than a full business website. The imagery references the Philippines and displays telecom branding associated with Globe, DITO, and Smart, suggesting the page may be attempting to present itself as a telecom-related reward or seasonal promotion.
Safety Assessment for labor-day-51gb-free8.jcs11[.]top
Several risk indicators were present at the time of this scan. The domain was flagged by 3 out of 91 security engines, with detections associated with malware and phishing. In addition, the malware scan reported a malicious threat level, flagged 7 out of 10 scanned files, and identified suspicious or malicious references involving external resources and scripts. The page also uses a giveaway theme with a highly specific "51GB free data" claim, which is a pattern commonly associated with social-engineering lures.
The site is also extremely new, with a registration age of about 1 day at the time of review, and it has no measurable popularity ranking. The screenshot shows branding from multiple telecom providers on a single promotional page, which may indicate unauthorized brand use or an attempt to increase credibility. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served over HTTPS with a valid Let's Encrypt certificate, and traffic appears to be proxied through Cloudflare infrastructure. The resolved IP was 172.67.146.58, with Cloudflare nameservers in use. DNSSEC was not enabled at the time of this scan, which is not uncommon but does mean DNS responses were not additionally protected by DNSSEC validation.
From a security perspective, the more notable concerns were application-level rather than transport-level. Multiple internal paths such as single.php and go.php parameters were flagged, and the page referenced external domains and assets that were themselves identified as suspicious or malicious by the malware scan. This combination may indicate redirect behavior, externally loaded payloads, or a campaign-style landing page structure.
Share your experience with this website. Was it safe? Did you encounter any issues?