c.top - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned c.top and returned a unknown verdict (score 0). The page resolved to 104.21.68.222 on Cloudflare, Inc. in US. The domain was registered 3048 days ago through Dynadot LLC. 2 domains and 1 IP were contacted, over 4 HTTP requests. 76 malware samples communicate with this URL. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 6%
- Scanned URL:
https://c.top/ - Domain: c.top · IP: 104.21.68.222 · AS13335 · US
- Server: cloudflare
- Page title: TikTok批量起号 + AI矩阵带货课程 | 2980元/年
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: Dynadot LLC · domain age 3048 days · created 2018-04-19
- Registrant country: CN
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 14 07: · subject CN=c.top
- HTTP requests captured: 4
- Scan tier: fast · observed 2026-08-23 21:33:33 UTC
Malware communicating with this URL (76)
These samples were observed contacting or being served from c.top. Each links to its full analysis.
- 82ace89455859ab63c51902a989d747ee734188606d5f1bf4b43751b3a671eec - referenced ·
82ace89455859ab63c51902a989d747e· first seen 2026-08-23 - e2e99f0df1fc224a6a2d70fff24de19dde5b7f6c0e6e72d2c593620b8b3e66b6 - referenced ·
e2e99f0df1fc224a6a2d70fff24de19d· first seen 2026-08-23 - dbc19abb1e4aaac3751625ef9ce04ccb3c381411d0c02fa2983c737beedcd3bd - referenced ·
dbc19abb1e4aaac3751625ef9ce04ccb· first seen 2026-08-23 - f3a05b3e6f07af7eeb7835c877cd2315dea9205fdd9557b894cef9c912af1bc3 - referenced ·
f3a05b3e6f07af7eeb7835c877cd2315· first seen 2026-08-23 - 6215ba5c31d12e20ee52c7d74efd774222e4157039b30a7da1a0642f72bbc1fe - referenced ·
6215ba5c31d12e20ee52c7d74efd7742· first seen 2026-08-23 - e7d2b28e5b5aef47c991faa579e0117981d49f8929007e084839c3d6c3b915b3 - referenced ·
e7d2b28e5b5aef47c991faa579e01179· first seen 2026-08-23 - 16f779bf0e84f83c74a64a366c4ba844ff0b2730893e0ad034b3af733cf85ac6 - referenced ·
16f779bf0e84f83c74a64a366c4ba844· first seen 2026-08-23 - d08316ef6ae8454766789e69fa46a7f6d8cfe569b554e4fbd6dee23340760fc3 - referenced ·
d08316ef6ae8454766789e69fa46a7f6· first seen 2026-08-23 - f826174d982c8dbf3715cfc31a19fc2f43a304efb669d6c5435e41f79d17fcb3 - referenced ·
f826174d982c8dbf3715cfc31a19fc2f· first seen 2026-08-23 - 5c2c959284d59c9afb08d2b326abd152f529853169e78b53bd5fe1d6ab723250 - referenced ·
5c2c959284d59c9afb08d2b326abd152· first seen 2026-08-23 - 1edddbb1f62b69c632c5a558b8a24a4e6531fa5c286a915c854ec865150d5c5b - referenced ·
1edddbb1f62b69c632c5a558b8a24a4e· first seen 2026-08-23 - ac8e58dfc64af6dc26fcbb5550ce9dfc2d2bea55f4fc1fbb4d7cd5aa9c1bc75d - referenced ·
ac8e58dfc64af6dc26fcbb5550ce9dfc· first seen 2026-08-23 - 133951a4c4e9e0f80be439cc147c98b7c31e2b9f6cdb710dbace4be19b9a4398 - referenced ·
133951a4c4e9e0f80be439cc147c98b7· first seen 2026-08-23 - 89b22bb924e76ee242fbf21dd1ae753b5fa96b0242362ca7804389f993874db8 - referenced ·
89b22bb924e76ee242fbf21dd1ae753b· first seen 2026-08-23 - c828ed8736a781c9cab0cfecae84fcdcabd89320767c19272f9e06c0166b8079 - referenced ·
c828ed8736a781c9cab0cfecae84fcdc· first seen 2026-08-22
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Abuse-heavy TLD .top
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- Cloudflare Insights
Contacted infrastructure
- 104.21.68.222 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- c.top
- static.cloudflareinsights.com
- 104.21.68.222
- https://c.top/
- https://c.top/static/css/styles.css
- https://c.top/static/css/nav.css
- https://c.top/static/js/auth.js?v=2026051602
- https://c.top/courses.html
- https://c.top/software.html
- https://c.top/contact.html
- https://c.top/login.html
- https://c.top/register.html
- https://c.top/software.html#software-n_power_video_matrix
- https://c.top/software.html#software-vip_student_downloader
- https://c.top/software.html#software-smart_scene_splitter
- https://c.top/software.html#software-flow_omni_studio
- https://c.top/software.html#software-grok_imagine_batch
- https://c.top/software.html#software-hailuo_international
- https://c.top/software.html#software-higgsfield_tiktok_agent
- https://c.top/software.html#software-runway_tiktok_agent
Other scans of c.top (7)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 15 Aug 2026 - unknown
Questions about c.top
- Is c.top safe?
- The scan of c.top on 23 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with c.top?
- 76 analysed samples communicate with this URL.
- How was c.top checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of c.top
Scanned on MalwareAnalyzer by Cyble · Open interactive scan