c.top - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned c.top and returned a unknown verdict (score 0). The page resolved to 104.21.68.222 on Cloudflare, Inc. in US. The domain was registered 3046 days ago through Dynadot LLC. 2 domains and 1 IP were contacted, over 4 HTTP requests. 48 malware samples communicate with this URL. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 6%
- Scanned URL:
https://c.top/ - Domain: c.top · IP: 104.21.68.222 · AS13335 · US
- Server: cloudflare
- Page title: TikTok批量起号 + AI矩阵带货课程 | 2980元/年
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: Dynadot LLC · domain age 3046 days · created 2018-04-19
- Registrant country: CN
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 14 07: · subject CN=c.top
- HTTP requests captured: 4
- Scan tier: fast · observed 2026-08-21 19:27:39 UTC
Malware communicating with this URL (48)
These samples were observed contacting or being served from c.top. Each links to its full analysis.
- f7b522d3fb0327f5b42314680ecc5191c84277ff5e70e418b3266444d69d11ce - referenced ·
f7b522d3fb0327f5b42314680ecc5191· first seen 2026-08-21 - 45dd7edf04577179e87f47377b659cc405d6880c126ee772a110dc97249daa42 - referenced ·
45dd7edf04577179e87f47377b659cc4· first seen 2026-08-21 - af308ff0e19f7abf4e36bb50b87c7b52af5662012b673e706a05ae2803b9fe7f - referenced ·
af308ff0e19f7abf4e36bb50b87c7b52· first seen 2026-08-21 - ec3be26f544969aee7c4b253c38c50f68d4c5421d97eecdc03fa39b9d520c5b9 - referenced ·
ec3be26f544969aee7c4b253c38c50f6· first seen 2026-08-21 - f6e57148739ef2abece2a8f1af6b494a92d69fa4091aeea9c1b965c2accfed73 - referenced ·
f6e57148739ef2abece2a8f1af6b494a· first seen 2026-08-21 - 15ea3e15f10facea0c990d2fafff6c4f2a191060e80572d236f4eb95a0918c40 - referenced ·
15ea3e15f10facea0c990d2fafff6c4f· first seen 2026-08-21 - 6373287286d936149e5ad101bc2791025a83302e029d4c0aa0a01c18855f9c65 - referenced ·
6373287286d936149e5ad101bc279102· first seen 2026-08-21 - a1be19891b68ad0da52007a4aeca67dc004dc1332706c5718628a1a62ea1d833 - referenced ·
a1be19891b68ad0da52007a4aeca67dc· first seen 2026-08-21 - 02a13c11c2e2ad0e9d594bd04bb1ed421e4a44480da73ed114174501461ca881 - referenced ·
02a13c11c2e2ad0e9d594bd04bb1ed42· first seen 2026-08-21 - 2fead45b16e04d8b1a6aa780aa3934320f77e08777c66e7acacfb46710b853d1 - referenced ·
2fead45b16e04d8b1a6aa780aa393432· first seen 2026-08-21 - e5b364ca127b24d904f14450e809284700b94ee3435731d74da7a8a5c422e3cc - referenced ·
e5b364ca127b24d904f14450e8092847· first seen 2026-08-20 - 497c3d3bc4061e06ea844a22b9055f08858688c3e119121be7c571599aea8743 - referenced ·
497c3d3bc4061e06ea844a22b9055f08· first seen 2026-08-20 - f5c1380a5ebbe9ebc15216e4d3d5a90d14baad352dc1dd32052861a2e31142e2 - referenced ·
f5c1380a5ebbe9ebc15216e4d3d5a90d· first seen 2026-08-20 - e4d806696bfe6b69754e9c979d02c986c5b20a7e91bc3b5525aa1ada6289f229 - referenced ·
e4d806696bfe6b69754e9c979d02c986· first seen 2026-08-20 - 3d8b407f6823d3b9dfb08ec1de5362790fc714ce995fafe755483c7e46b12348 - referenced ·
3d8b407f6823d3b9dfb08ec1de536279· first seen 2026-08-20
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Abuse-heavy TLD .top
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- Cloudflare Insights
Contacted infrastructure
- 104.21.68.222 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- c.top
- static.cloudflareinsights.com
- 104.21.68.222
- https://c.top/
- https://c.top/static/css/styles.css
- https://c.top/static/css/nav.css
- https://c.top/static/js/auth.js?v=2026051602
- https://c.top/courses.html
- https://c.top/software.html
- https://c.top/contact.html
- https://c.top/login.html
- https://c.top/register.html
- https://c.top/software.html#software-n_power_video_matrix
- https://c.top/software.html#software-vip_student_downloader
- https://c.top/software.html#software-smart_scene_splitter
- https://c.top/software.html#software-flow_omni_studio
- https://c.top/software.html#software-grok_imagine_batch
- https://c.top/software.html#software-hailuo_international
- https://c.top/software.html#software-higgsfield_tiktok_agent
- https://c.top/software.html#software-runway_tiktok_agent
Other scans of c.top (7)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 15 Aug 2026 - unknown
Questions about c.top
- Is c.top safe?
- The scan of c.top on 21 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with c.top?
- 48 analysed samples communicate with this URL.
- How was c.top checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of c.top
Scanned on MalwareAnalyzer by Cyble · Open interactive scan