The scan of a.top on 12 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with a.top?

8 analysed samples communicate with this URL.

How was a.top checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

a.top - URL scan, 12 Aug 2026

MalwareAnalyzer by Cyble scanned a.top and returned a unknown verdict (score 0). The page resolved to 15.197.148.33 on Amazon Technologies Inc. in US. The domain was registered 4242 days ago through GoDaddy.com. 1 domain and 1 IP were contacted. 8 malware samples communicate with this URL. This is a point-in-time observation from 12 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 0) · Confidence 6%
Scanned URL: https://a.top/
Domain: a.top · IP: 15.197.148.33 · AS16509 · US
HTTP status: 200 · text/html
Registrar: GoDaddy.com · domain age 4242 days · created 2014-12-31
Registrant country: US
TLS issuer: C=US, O=GoDaddy.com, CN=GoDaddy TLS Intermediate CA DV - R1v1 · valid to Dec 20 23: · subject CN=a.top
Scan tier: fast · observed 2026-08-12 22:44:05 UTC

Malware communicating with this URL (8)

These samples were observed contacting or being served from a.top. Each links to its full analysis.

blockly_compressed.js - referenced · b3e34ea1b0d8bb10055de06e0e3bf866 · first seen 2026-08-12
3903731066-lbx__pt_br.js - referenced · f7e2bc3ee0d4f9ae4d1267999a73f2e2 · first seen 2026-08-12
codeMirror.bundle.min.js - referenced · 7b5277fff495c8fc86f70c16bec5efaa · first seen 2026-08-12
3766621756-lbx__pt_br.js - referenced · e5823aed4ddaed520ef63a3ab556cae7 · first seen 2026-08-12
4142632578-lbx__pt_br.js - referenced · 78184f664658e232bcc5a34df70420a8 · first seen 2026-08-12
54808d28c720599d8588557fc11bba5c90bdc65e8004483bf5f2c560a50d7f07 - referenced · 54808d28c720599d8588557fc11bba5c · first seen 2026-08-12
chargebee.js - referenced · 548e3fb4e441be26774bfec27beb6e26 · first seen 2026-08-11
4edd6e0bd9a145346a9777c16a62a2e20e0dbbf07e4e8db43417a62ee96ab0b7 - referenced · 4edd6e0bd9a145346a9777c16a62a2e2 · first seen 2026-08-11

Antivirus & YARA (0 of 44 engines)

No engine flagged this page's content.

Why this verdict

Abuse-heavy TLD .top
Valid TLS, no impersonation or off-origin credential post

Contacted infrastructure

15.197.148.33 - AS16509 Amazon Technologies Inc. (United States)

Observed indicators

a.top
15.197.148.33
https://a.top/
https://a.top/lander

Other scans of a.top (8)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

23 Aug 2026 - unknown
23 Aug 2026 - unknown
21 Aug 2026 - unknown
21 Aug 2026 - unknown
20 Aug 2026 - unknown
20 Aug 2026 - unknown
16 Aug 2026 - unknown
15 Aug 2026 - unknown

Questions about a.top

Is a.top safe?: The scan of a.top on 12 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with a.top?: 8 analysed samples communicate with this URL.
How was a.top checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of a.top

Scanned on MalwareAnalyzer by Cyble · Open interactive scan