c.top - URL scan, 15 Aug 2026
MalwareAnalyzer by Cyble scanned c.top and returned a unknown verdict (score 0). The page resolved to 172.67.199.47. The domain was registered 3039 days ago through Dynadot LLC. 2 domains and 1 IP were contacted, over 4 HTTP requests. 19 malware samples communicate with this URL. This is a point-in-time observation from 15 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 6%
- Scanned URL:
https://c.top/ - Domain: c.top · IP: 172.67.199.47
- Server: cloudflare
- Page title: TikTok批量起号 + AI矩阵带货课程 | 2980元/年
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: Dynadot LLC · domain age 3039 days · created 2018-04-19
- Registrant country: CN
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Sep 16 06: · subject CN=c.top
- HTTP requests captured: 4
- Scan tier: fast · observed 2026-08-15 01:06:12 UTC
Malware communicating with this URL (19)
These samples were observed contacting or being served from c.top. Each links to its full analysis.
- ee8e3eba9ba7250ba8c855c4aca38d4a8b6af38a9b1421d38171e6a3232ced6c - referenced ·
ee8e3eba9ba7250ba8c855c4aca38d4a· first seen 2026-08-15 - e91f5086b4e979eb2118f62c0c3a31b9f9d7536c8f1c9833d099e114e57188af - referenced ·
e91f5086b4e979eb2118f62c0c3a31b9· first seen 2026-08-14 - e8b3ef2acec859e800be975218771e597e53e7faaed56a0a28c681db7f19a823 - referenced ·
e8b3ef2acec859e800be975218771e59· first seen 2026-08-14 - 0e937ba616f17e62e22905205b60448d9409f05bb9f285a524568ac1f9477fbd - referenced ·
0e937ba616f17e62e22905205b60448d· first seen 2026-08-14 - 641f3fa64e9ce989a1ebddf01e0b28128b34a2804f8ab889cdebd1a7a3f1cafc - referenced ·
641f3fa64e9ce989a1ebddf01e0b2812· first seen 2026-08-14 - fe30309744256c3fe326e26c17b04bb8878827888af476c1bc6a51d5e5ac129f - referenced ·
fe30309744256c3fe326e26c17b04bb8· first seen 2026-08-14 - f.txt - referenced ·
0a51831b781627f061f6dce695c18a5c· first seen 2026-08-14 - ba0deb07124b42384feda3903763821b308ba8191af10b2afa7105404893c9e2 - referenced ·
ba0deb07124b42384feda3903763821b· first seen 2026-08-14 - 9d6f6025435101f278a39a708032c613e461bd7a9e8f60f375dd528c07b4f57d - referenced ·
9d6f6025435101f278a39a708032c613· first seen 2026-08-13 - 13337e01fae8fbc8be3d910de62978f65f08cea5cc0884cc2a9cf40c25a075ac - referenced ·
13337e01fae8fbc8be3d910de62978f6· first seen 2026-08-13 - bf04a71ee520b069080f965192f436c1cdda7fd017fb0a4b581b255d3b8bd1ad - referenced ·
bf04a71ee520b069080f965192f436c1· first seen 2026-08-13 - 5001e5f629b30764860f8f80b7b4e13a4e5ddeb8071970016b67555a2eb841f5 - referenced ·
5001e5f629b30764860f8f80b7b4e13a· first seen 2026-08-13 - blockly_compressed.js - referenced ·
b3e34ea1b0d8bb10055de06e0e3bf866· first seen 2026-08-12 - codeMirror.bundle.min.js - referenced ·
7b5277fff495c8fc86f70c16bec5efaa· first seen 2026-08-12 - 636f8b858f681acb7bfa6f583a96630a.js - referenced ·
e6edf834c5900d2354164a41917cd276· first seen 2026-08-12
Antivirus & YARA (0 of 44 engines)
No engine flagged this page's content.
Why this verdict
- Abuse-heavy TLD .top
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- Cloudflare Insights
Contacted infrastructure
- 172.67.199.47 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- c.top
- static.cloudflareinsights.com
- 172.67.199.47
- https://c.top/
- https://c.top/static/css/styles.css
- https://c.top/static/css/nav.css
- https://c.top/static/js/auth.js?v=2026051602
- https://c.top/courses.html
- https://c.top/software.html
- https://c.top/contact.html
- https://c.top/login.html
- https://c.top/register.html
- https://c.top/software.html#software-n_power_video_matrix
- https://c.top/software.html#software-vip_student_downloader
- https://c.top/software.html#software-smart_scene_splitter
- https://c.top/software.html#software-flow_omni_studio
- https://c.top/software.html#software-grok_imagine_batch
- https://c.top/software.html#software-hailuo_international
- https://c.top/software.html#software-higgsfield_tiktok_agent
- https://c.top/software.html#software-runway_tiktok_agent
Other scans of c.top (7)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
Questions about c.top
- Is c.top safe?
- The scan of c.top on 15 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with c.top?
- 19 analysed samples communicate with this URL.
- How was c.top checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of c.top
Scanned on MalwareAnalyzer by Cyble · Open interactive scan