Is clickchase123.top safe?

No. MalwareAnalyzer scanned clickchase123.top on 21 Aug 2026 and returned a malicious verdict with a score of 98 out of 100, categorised as phishing and suspicious-infrastructure. Treat it as hostile until it is re-checked.

How was clickchase123.top checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

clickchase123.top - malicious URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned clickchase123.top and returned a malicious verdict (score 98), categorised as phishing, suspicious-infrastructure. The page resolved to 104.21.24.222 on Cloudflare, Inc. in US. The domain was registered 276 days ago through Dynadot LLC. 5 domains and 6 IPs were contacted, over 28 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 98) · Confidence 100%
Scanned URL: https://clickchase123.top/
Domain: clickchase123.top · IP: 104.21.24.222 · AS13335 · US
Server: cloudflare
Page title: Crazy Monkey
HTTP status: 200 · text/html; charset=utf-8
Registrar: Dynadot LLC · domain age 276 days · created 2025-11-17
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 10 02: · subject CN=clickchase123.top
HTTP requests captured: 28 · cookies set: 3
Scan tier: standard · observed 2026-08-21 11:42:22 UTC

Antivirus & YARA (1 of 47 engines)

YARA: Yara-Rules community [yara]: YR_AntiVM_Sandbox (page content)

Why this verdict

Antivirus/YARA detection in page content: YR_AntiVM_Sandbox
Domain impersonates chase (combosquat)
Algorithmically-generated (DGA-like) hostname
Abuse-heavy TLD .top
Matches phishing-kit family "Meta / Facebook Login Kit"

Detected technologies

Cloudflare

Contacted infrastructure

104.21.24.222 - AS13335 Cloudflare, Inc. (United States)
104.16.80.73 - AS13335 Cloudflare, Inc. (United States)
142.251.222.227 - AS15169 Google LLC (Malaysia)
142.250.195.182 - AS15169 Google LLC (India)

Observed indicators

clickchase123.top
static.cloudflareinsights.com
fonts.googleapis.com
fonts.gstatic.com
play-lh.googleusercontent.com
104.21.24.222
172.67.220.222
104.16.80.73
142.250.195.170
142.251.222.227
142.250.195.182
https://clickchase123.top/
https://clickchase123.top/manifest/clickchase123.top_27656.json
https://clickchase123.top/static/landings/libs/ua-parser.min.js
https://clickchase123.top/skip_push_install.js?v=4
https://clickchase123.top/custom_template/0/js_google/additional.js?v=215
https://clickchase123.top/custom_template/0/assets/index.Rzd3R6FE.js
https://clickchase123.top/custom_template/0/assets/index.CxDjIN4P.css
https://clickchase123.top/fonts/all.css?family2
https://static.cloudflareinsights.com/beacon.min.js/v4513226cdae34746b4dedf0b4dfa099e1781791509496

Questions about clickchase123.top

Is clickchase123.top safe?: No. MalwareAnalyzer scanned clickchase123.top on 21 Aug 2026 and returned a malicious verdict with a score of 98 out of 100, categorised as phishing and suspicious-infrastructure. Treat it as hostile until it is re-checked.
How was clickchase123.top checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of clickchase123.top

Scanned on MalwareAnalyzer by Cyble · Open interactive scan