The scan of dm40.top on 15 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

How was dm40.top checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

dm40.top - URL scan, 15 Aug 2026

MalwareAnalyzer by Cyble scanned dm40.top and returned a unknown verdict (score 6). The page resolved to 172.67.147.27 on Cloudflare, Inc. in US. 8 domains and 3 IPs were contacted, over 2 HTTP requests. The request followed 2 redirects before landing. This is a point-in-time observation from 15 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 15%
Scanned URL: https://dgssu.com/upfolder/e/files/20210908205303.pdf
Domain: dm40.top · IP: 172.67.147.27 · AS13335 · US
Server: cloudflare
Page title: 请验证... / Please verify...
HTTP status: 200 · text/html; charset=utf-8
TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Oct 11 21: · subject CN=dm40.top
HTTP requests captured: 2
Scan tier: standard · observed 2026-08-15 01:24:13 UTC

Redirect chain

https://dgssu.com/upfolder/e/files/20210908205303.pdf
https://dm40.top/upfolder/e/files/20210908205303.pdf
https://dm40.top/verify/4732c609?host=dm40.top&redirect=%2Fupfolder%2Fe%2Ffiles%2F20210908205303.pdf

Antivirus & YARA (0 of 44 engines)

No engine flagged this page's content.

Why this verdict

Abuse-heavy TLD .top
Valid TLS, no impersonation or off-origin credential post
Cross-host redirect chain

Detected technologies

Cloudflare
Express
Cloudflare Insights

Contacted infrastructure

172.67.147.27 - AS13335 Cloudflare, Inc. (United States)
172.67.133.174 - AS13335 Cloudflare, Inc. (United States)
104.21.79.188 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

dm40.top
quanjiu.xyz
dmm881.com
down.8dy.app
18s.cc
cdn-play.sgvafs.com
transwww.dm40.top
static.cloudflareinsights.com
172.67.147.27
172.67.133.174
104.21.79.188
https://dm40.top/verify/4732c609?host=dm40.top&redirect=%2Fupfolder%2Fe%2Ffiles%2F20210908205303.pdf
https://dm40.top/favicon.ico
https://quanjiu.xyz/tp/logo_k17.png
https://dmm881.com/
https://down.8dy.app/
https://18s.cc/
https://cdn-play.sgvafs.com/resource/aHR0cHM6Ly94bnh4LmRnYXYxMS5jb20vanMvanEtc2xpZGVWZXJpZnkuanM=.js
https://transwww.dm40.top/mkm.js?v=2026081401
https://static.cloudflareinsights.com/beacon.min.js/v4513226cdae34746b4dedf0b4dfa099e1781791509496

Other scans of dm40.top (2)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

21 Aug 2026 - unknown · https://dm40.top/verify/26bf8457?host=dm40.top&redirect=%2Fupfolder%2Fe%2Ffiles%2F20210923025219.pdf
8 Aug 2026 - unknown · https://dm40.top/verify/df0de5f5?host=dm40.top&redirect=%2Fupfolder%2Fe%2Ffiles%2F20210903151201.pdf

Questions about dm40.top

Is dm40.top safe?: The scan of dm40.top on 15 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
How was dm40.top checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of dm40.top

Scanned on MalwareAnalyzer by Cyble · Open interactive scan