a.top - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned a.top and returned a unknown verdict (score 0). The page resolved to 3.33.130.190 on Amazon Technologies Inc. in US. The domain was registered 4250 days ago through GoDaddy.com. 1 domain and 1 IP were contacted. 34 malware samples communicate with this URL. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 6%
- Scanned URL:
https://a.top/ - Domain: a.top · IP: 3.33.130.190 · AS16509 · US
- HTTP status: 200 · text/html
- Registrar: GoDaddy.com · domain age 4250 days · created 2014-12-31
- Registrant country: US
- TLS issuer: C=US, O=GoDaddy.com, CN=GoDaddy TLS Intermediate CA DV - R1v1 · valid to Dec 20 23: · subject CN=a.top
- Scan tier: fast · observed 2026-08-21 00:28:27 UTC
Malware communicating with this URL (34)
These samples were observed contacting or being served from a.top. Each links to its full analysis.
- 5a59a539fd641a9bccfb867ed853aeb8a0be17e919164a089598921a010a6d36 - referenced ·
5a59a539fd641a9bccfb867ed853aeb8· first seen 2026-08-21 - 216a769ca8207cf2489353580d73c6084e37300cf6fc7d9bb3bff9e23d688621 - referenced ·
216a769ca8207cf2489353580d73c608· first seen 2026-08-20 - 75dddabf09140ec98f00ece2c32cd9ca0bafd88d70824a7a605af725add5f0cb - referenced ·
75dddabf09140ec98f00ece2c32cd9ca· first seen 2026-08-20 - 47e679c63f027c299be79ebceb4b8d988f6f7cf92f41882d774962916a844bff - referenced ·
47e679c63f027c299be79ebceb4b8d98· first seen 2026-08-20 - f5c1380a5ebbe9ebc15216e4d3d5a90d14baad352dc1dd32052861a2e31142e2 - referenced ·
f5c1380a5ebbe9ebc15216e4d3d5a90d· first seen 2026-08-20 - 74507f058e5690afde02291f4abda58ada51da2a9164bc78ee560e21b0bed683 - referenced ·
74507f058e5690afde02291f4abda58a· first seen 2026-08-20 - f.txt - referenced ·
5c4ece1f1a97a6ff05e1622f544e1b58· first seen 2026-08-19 - 60a8a5d0242d70cfd70be8248d655934ba3a1ee9b2e2c4c492e64d5b6d83aa7b - referenced ·
60a8a5d0242d70cfd70be8248d655934· first seen 2026-08-19 - f.txt - referenced ·
71f8db09aec8b4eb26c6a884d4bf2f98· first seen 2026-08-17 - f.txt - referenced ·
8e3a58508731d3d50693b9eefa594ea7· first seen 2026-08-17 - c49848a3c78fcc46cbe8c8c5e02f7f94bd7d103c0777a10e6ef8d1740e4dc9f3 - referenced ·
c49848a3c78fcc46cbe8c8c5e02f7f94· first seen 2026-08-16 - 243872184-lbx__pt_br.js - referenced ·
1d643e4b93da79c302afdc8dab7b357a· first seen 2026-08-16 - 6ee6fc892de79953ab678b447151f27578fed64fb77f618c1dc6dcd611c08b11 - referenced ·
6ee6fc892de79953ab678b447151f275· first seen 2026-08-16 - 129205357-lbx__pt_br.js - referenced ·
7957d117a68d99b69544472996d943f9· first seen 2026-08-15 - f.txt - referenced ·
c01b9893f4c530487a994412dfebbf68· first seen 2026-08-15
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Abuse-heavy TLD .top
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 3.33.130.190 - AS16509 Amazon Technologies Inc. (United States)
Observed indicators
- a.top
- 3.33.130.190
- https://a.top/
- https://a.top/lander
Other scans of a.top (8)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 16 Aug 2026 - unknown
- 15 Aug 2026 - unknown
- 12 Aug 2026 - unknown
Questions about a.top
- Is a.top safe?
- The scan of a.top on 21 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with a.top?
- 34 analysed samples communicate with this URL.
- How was a.top checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of a.top
Scanned on MalwareAnalyzer by Cyble · Open interactive scan