Is labor-day-51gb-free2.ij7gv.top a scam?

Our automated security review flags labor-day-51gb-free2.ij7gv.top as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Is labor-day-51gb-free2.ij7gv.top safe to use?

No — labor-day-51gb-free2.ij7gv.top scored 1/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.

Does labor-day-51gb-free2.ij7gv.top have a valid SSL certificate?

Yes. labor-day-51gb-free2.ij7gv.top presents a valid TLSv1.3 certificate issued by Let's Encrypt · E8, expiring in 35 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the labor-day-51gb-free2.ij7gv.top domain?

labor-day-51gb-free2.ij7gv.top is 1 month old, registered on 4/30/2026 through 成都西维数码科技有限公司. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has labor-day-51gb-free2.ij7gv.top been flagged by antivirus engines?

14 out of 92 antivirus engines in our malware network flagged labor-day-51gb-free2.ij7gv.top as malicious or suspicious (12 outright malicious). Even one detection is a meaningful signal.

Is labor-day-51gb-free2.ij7gv.top on any phishing or malware blacklists?

No. labor-day-51gb-free2.ij7gv.top is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is labor-day-51gb-free2.ij7gv.top hosted?

labor-day-51gb-free2.ij7gv.top resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the labor-day-51gb-free2.ij7gv.top report updated?

This is a permanent record of the scan run on June 23, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around labor-day-51gb-free2.ij7gv.top have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is labor-day-51gb-free2.ij7gv.top legit or a scam?

Our verdict:Dangerous· 1/100

SafeSuspiciousDangerous

This malicious site uses a fake Independence Day giveaway lure to harvest mobile numbers and spread phishing links through forced social sharing.

Top reasons

Flagged as phishing and malware by 12 security engines including BitDefender, ESET, and Fortinet.Uses a forced-sharing mechanic to spread the scam to the victim's contacts.Domain is only 54 days old and uses a high-risk .top extension.

labor-day-51gb-free2.ij7gv.topScanned 1h ago

Post Facebook

Trust score

DANGEROUS

Heuristics 0·MT 5

Category tags

lottery-scam#lottery scam#data harvester#fake giveaway100% MT confidence

Technical red flags (3)

14 of 92 engines flagged Domain is 54 days old Lottery Scam

Warning signals (1)

Scam-network signals (25/100)

Positive signals (3)

Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

14/92

Engines flagged this URL

Domain Age

54 days old

Registered Apr 30, 2026

MT Intelligence

Dangerous

Critical likelihood · 100% confidence

DANGEROUS

Critical risk detected

14 of 92 antivirus engines flag this page (12 outright malicious). Multiple independent checks — antivirus engines, browser safety blocklists, and threat databases — flagged this site. Don't enter personal information, deposit money, or download files.

Website Preview

LIVE RENDER

labor-day-51gb-free2.ij7gv.top

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Critical scam likelihoodengineMT · Guardiantrust5/100

MT AgentLive web researchVisual inspectionNetwork correlation

Confidence

Our analysis confirms this is a classic 'viral giveaway' scam targeting mobile users. The page uses a 54-day-old domain and triggers multiple high-confidence detections from our antivirus network, including BitDefender and ESET. It employs a deceptive 'progress bar' that requires users to share the link with 15 friends before 'claiming' a reward that does not exist. This mechanic is a hallmark of Phishing-as-a-Service kits designed for mass data harvesting and affiliate fraud. The presence of fake Facebook-style comments is a scripted tactic used to create a false sense of legitimacy.

Full dossier

Analysis complete

Page Content

The site promises '128GB FREE Data' for Independence Day, using a template that mimics official telecom branding. It features a fake comment section with scripted testimonials and a progress bar that forces users to share the scam via Messenger to 'verify' their claim.

Infrastructure

The domain is hosted behind Cloudflare to hide its true origin and uses a low-trust .top TLD, which is frequently used by scam networks. It loads external scripts from 626cdn.com and other sources associated with known phishing campaigns.

Domain History

Registered only 54 days ago through a Chinese registrar, the domain ij7gv.top has already been linked to multiple subdomains running identical 'Labor Day' and 'Independence Day' scams. This rapid generation of subdomains is typical of disposable phishing infrastructure.

Web Reputation

Our intelligence stack shows 12 security engines flagging this URL as malicious or phishing. Independent security researchers have documented this specific campaign as a data-harvesting operation that redirects users to monetization sites after stealing their contact information.

Risk Factors

Flagged as phishing and malware by 12 security engines including BitDefender, ESET, and Fortinet.
Uses a forced-sharing mechanic to spread the scam to the victim's contacts.
Domain is only 54 days old and uses a high-risk .top extension.
Contains fake social media comments designed to deceive users.
No legitimate business contact information, physical address, or privacy policy provided.
Linked to a known phishing-as-a-service network using the ij7gv.top domain.
Redirects users to suspicious third-party monetization and affiliate fraud sites.

Positive Signals

The site uses a valid SSL certificate for encrypted traffic.

AI Recommendation

Do not enter your mobile number or any personal details on this page. Close the site immediately and do not share the link with your contacts, as it is designed to spread phishing to your friends and family.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for labor-day-51gb-free2.ij7gv.top, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age

1 months

Registered Apr 2026

Business registration

Active · China

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

4 scam reports

Key findings

7 headline facts from open-web research

Domain ij7gv.top registered on April 30, 2026 (54 days old at time of analysis) by Chinese registrar 成都西维数码科技有限公司; hosted on Cloudflare
PCRisk scan (Jun 23, 2026): categorized as Suspicious, 5/100 trust score, flagged by 15/91 engines; references redirects to free.gf920.com and tj.16gift.com (flagged malicious)
Part of a widespread 'Labor Day / Independence Day 51GB or 128GB free data' phishing campaign targeting Philippine users via Messenger/Facebook lures
Medium investigation describes the campaign as Phishing-as-a-Service using anti-analysis scripts, telemetry to tj.16gift.com, forced sharing, and final redirect to affiliate/monetization site free.gf920.com for data harvesting and CPA fraud
Similar subdomains (e.g. labor-day-51gb-free1.ij7gv.top, labor-day-51gb-free7.ij7gv.top) flagged as phishing with 1/100 trust scores by Gridinsoft
Quttera analysis flags high/medium risk on paths like /single.php and /go.php; no major DNS blocklists (Spamhaus, etc.) listed it at scan time but added to custom deny lists
Page promotes fake free mobile data reward with telecom branding, consistent with lottery/giveaway scam family

Scam reports (4)

Direct quotes from public scam databases, forums, and news.

PCRisk Scanneropen
"Category: Suspicious. 5/100 Trust Score. Flagged by 15 of 91 engines. Potentially Dangerous. ... classic giveaway-style lure promising large amounts of free mobile data"
Medium Article (KuroSh1ro)open
"Initial Lure: labor-day-51gb-free7.ij7gv.top — Viral bait domain. ... monetized data harvesting combined with affiliate fraud"
Gridinsoftopen
"Labor-day-51gb-free1.ij7gv.top shows phishing indicators and a 1/100 trust score. ... matches a common credential-theft flow"
GitHub hagezi/dns-blocklistsopen
"Block Labor Day Free 51GB Phishing domains #10046. ij7gv.top ... malicious/scam/phishing Denylist request"

Business registration

Status: active · China

ij7gv.top registered April 30, 2026 via 成都西维数码科技有限公司 (Chengdu West Dimension Digital Technology Co., Ltd.); expires 2027; subdomain creation likely more recent

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We found multiple scam reports on independent security platforms and technical blogs. Analysts at PCRisk and Gridinsoft have flagged this domain and its subdomains with extremely low trust scores due to phishing indicators. A detailed investigation on Medium describes this as a 'viral bait' campaign that uses mobile data lures to perform CPA fraud and harvest personal telemetry.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Moderate correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score

0/100

ClearLowModerateHighCritical

Evidence (2)

Lottery-winner template detected with processing-fee bait.
Short name on low-trust .top TLD — over-represented on scam farms.

Linked signals (3)

cdn.jsdelivr.netTemplate · Lottery ScamPattern · LOW Trust TLD

Antivirus Engines

Detection matrix · live

14 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

12Malicious2Suspicious49Harmless92Engines

of 92

ADMINUSLabs

Malicious· malicious

BitDefender

Malicious· phishing

CRDF

Malicious· malicious

CyRadar

Malicious· malware

ESET

Malicious· phishing

Fortinet

Malicious· malware

G-Data

Malicious· phishing

LevelBlue

Malicious· phishing

Lionic

Malicious· phishing

Sophos

Malicious· phishing

VIPRE

Malicious· phishing

Webroot

Malicious· malicious

alphaMountain.ai

Suspicious· suspicious

Gridinsoft

Suspicious· suspicious

14 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No phone number listed on the page.
No postal address visible on the page.
Scam family match: Lottery Scam.

Domain & Encryption

Domain History

Age54 days old

Registrar成都西维数码科技有限公司

RegisteredApr 30, 2026

ExpiresApr 30, 2027

Owner privacyHidden

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerLet's Encrypt · E8

ExpiresJul 29, 2026 (35d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Web servercloudflare

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://labor-day-51gb-free2.ij7gv.top/
2200https://labor-day-51gb-free2.ij7gv.top/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file1

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Avoid this site

Our automated review flagged enough risk that you should treat this site as unverified.

Do not interact with labor-day-51gb-free2.ij7gv.top
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
Verify the business through independent channels
Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.
Never use irreversible payment methods
Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.
Share your experience
If you have additional context, drop a comment below or post on the MalwareTips forum.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

ListedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

static.cloudflareinsights.com cdn.jsdelivr.net 626cdn.com code.jquery.com

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review flags labor-day-51gb-free2.ij7gv.top as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
No — labor-day-51gb-free2.ij7gv.top scored 1/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
Yes. labor-day-51gb-free2.ij7gv.top presents a valid TLSv1.3 certificate issued by Let's Encrypt · E8, expiring in 35 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
labor-day-51gb-free2.ij7gv.top is 1 month old, registered on 4/30/2026 through 成都西维数码科技有限公司. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
14 out of 92 antivirus engines in our malware network flagged labor-day-51gb-free2.ij7gv.top as malicious or suspicious (12 outright malicious). Even one detection is a meaningful signal.
No. labor-day-51gb-free2.ij7gv.top is not currently listed on the major browser blocklist feeds that modern browsers use.
labor-day-51gb-free2.ij7gv.top resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on June 23, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around labor-day-51gb-free2.ij7gv.top have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·labor-day-51gb-free2.ij7gv.top

DANGEROUS

This is a fraudulent data-harvesting site impersonating a holiday giveaway to steal mobile numbers and personal information. It uses forced social sharing and fake testimonials to trick users into a phishing loop. Do not enter your phone number or share the link.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Dangerous reports

askdasnjdnjasdjnasndjajnd.lol

claim-bitcat.pages.dev

claim-qubit.pages.dev

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.