c.top - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned c.top and returned a unknown verdict (score 0). The page resolved to 104.21.68.222 on Cloudflare, Inc. in US. The domain was registered 3047 days ago through Dynadot LLC. 2 domains and 1 IP were contacted, over 4 HTTP requests. 66 malware samples communicate with this URL. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 6%
- Scanned URL:
https://c.top/ - Domain: c.top · IP: 104.21.68.222 · AS13335 · US
- Server: cloudflare
- Page title: TikTok批量起号 + AI矩阵带货课程 | 2980元/年
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: Dynadot LLC · domain age 3047 days · created 2018-04-19
- Registrant country: CN
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 14 07: · subject CN=c.top
- HTTP requests captured: 4
- Scan tier: fast · observed 2026-08-23 03:33:45 UTC
Malware communicating with this URL (66)
These samples were observed contacting or being served from c.top. Each links to its full analysis.
- 1edddbb1f62b69c632c5a558b8a24a4e6531fa5c286a915c854ec865150d5c5b - referenced ·
1edddbb1f62b69c632c5a558b8a24a4e· first seen 2026-08-23 - ac8e58dfc64af6dc26fcbb5550ce9dfc2d2bea55f4fc1fbb4d7cd5aa9c1bc75d - referenced ·
ac8e58dfc64af6dc26fcbb5550ce9dfc· first seen 2026-08-23 - 133951a4c4e9e0f80be439cc147c98b7c31e2b9f6cdb710dbace4be19b9a4398 - referenced ·
133951a4c4e9e0f80be439cc147c98b7· first seen 2026-08-23 - 89b22bb924e76ee242fbf21dd1ae753b5fa96b0242362ca7804389f993874db8 - referenced ·
89b22bb924e76ee242fbf21dd1ae753b· first seen 2026-08-23 - c828ed8736a781c9cab0cfecae84fcdcabd89320767c19272f9e06c0166b8079 - referenced ·
c828ed8736a781c9cab0cfecae84fcdc· first seen 2026-08-22 - 225379861f291b792f2c31b00b3998a8dacca2edf56501f9853eb00a5011b118 - referenced ·
225379861f291b792f2c31b00b3998a8· first seen 2026-08-22 - 6346d3c6b38dcc3b9b33369031a61507490bdc95a469f352accabd09e39e56d2 - referenced ·
6346d3c6b38dcc3b9b33369031a61507· first seen 2026-08-22 - 9de922cf1967e4328965311ca6000b541ac336c153e06be68f948b915aea0c83 - referenced ·
9de922cf1967e4328965311ca6000b54· first seen 2026-08-22 - 75224e3f248dafeeadc291b294325a634e0982bad88f3b7f0a4af06ceba19c8c - referenced ·
75224e3f248dafeeadc291b294325a63· first seen 2026-08-22 - 2ebf0dbdf84fe07db08daed5adb0ec57dac61b59ea1254028c1dc5ee6ad744ce - referenced ·
2ebf0dbdf84fe07db08daed5adb0ec57· first seen 2026-08-22 - a8014f423457233312fb2ad71266eba9a727909a859916859353eafe8c12a9d2 - referenced ·
a8014f423457233312fb2ad71266eba9· first seen 2026-08-22 - 9ee8a200a5626e37c1914939cd0e1b95e46156b6ae3e86a2af706e73a9312ff6 - referenced ·
9ee8a200a5626e37c1914939cd0e1b95· first seen 2026-08-22 - 9cce41dc501192631caf8b66cea14b3e3876f292ad9d94a2db64022f766d0919 - referenced ·
9cce41dc501192631caf8b66cea14b3e· first seen 2026-08-22 - 6f9bde779f938d33b124fd3a38608cac7f2097e8da34969a52c02c6d5504ff98 - referenced ·
6f9bde779f938d33b124fd3a38608cac· first seen 2026-08-22 - 1887d81364a608663d411e3f827abf816614f63b3560bfb44fdae853a54e4c50 - referenced ·
1887d81364a608663d411e3f827abf81· first seen 2026-08-22
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Abuse-heavy TLD .top
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- Cloudflare Insights
Contacted infrastructure
- 104.21.68.222 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- c.top
- static.cloudflareinsights.com
- 104.21.68.222
- https://c.top/
- https://c.top/static/css/styles.css
- https://c.top/static/css/nav.css
- https://c.top/static/js/auth.js?v=2026051602
- https://c.top/courses.html
- https://c.top/software.html
- https://c.top/contact.html
- https://c.top/login.html
- https://c.top/register.html
- https://c.top/software.html#software-n_power_video_matrix
- https://c.top/software.html#software-vip_student_downloader
- https://c.top/software.html#software-smart_scene_splitter
- https://c.top/software.html#software-flow_omni_studio
- https://c.top/software.html#software-grok_imagine_batch
- https://c.top/software.html#software-hailuo_international
- https://c.top/software.html#software-higgsfield_tiktok_agent
- https://c.top/software.html#software-runway_tiktok_agent
Other scans of c.top (7)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 15 Aug 2026 - unknown
Questions about c.top
- Is c.top safe?
- The scan of c.top on 23 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with c.top?
- 66 analysed samples communicate with this URL.
- How was c.top checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of c.top
Scanned on MalwareAnalyzer by Cyble · Open interactive scan