The scan of g.top-h.top on 21 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with g.top-h.top?

5 analysed samples communicate with this URL.

How was g.top-h.top checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

g.top-h.top - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned g.top-h.top and returned a unknown verdict (score 12). 1 domain and 0 IPs were contacted. 5 malware samples communicate with this URL. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 12) · Confidence 18%
Scanned URL: https://g.top-h.top/
Domain: g.top-h.top
Scan tier: fast · observed 2026-08-21 06:58:29 UTC

Malware communicating with this URL (5)

These samples were observed contacting or being served from g.top-h.top. Each links to its full analysis.

bfccc321c5453539e185ffaf0404b04e49a72cec3f71b54cb03373690498aab3 - referenced · bfccc321c5453539e185ffaf0404b04e · first seen 2026-08-21
3d8b407f6823d3b9dfb08ec1de5362790fc714ce995fafe755483c7e46b12348 - referenced · 3d8b407f6823d3b9dfb08ec1de536279 · first seen 2026-08-20
57ece2b554055050445b353e8d6aee19df936df2c81ff0f15d39c162f4f7d7e1 - referenced · 57ece2b554055050445b353e8d6aee19 · first seen 2026-08-20
d48c1ffc2359233f84ca2802c27c2e4ee5f9b6601e14b9a7a002412b1b555a1c - referenced · d48c1ffc2359233f84ca2802c27c2e4e · first seen 2026-08-16
8340315322c85136a8d81fc2a0abc415918536c6add633e047bcb00d5e392b2c - referenced · 8340315322c85136a8d81fc2a0abc415 · first seen 2026-08-14

Why this verdict

Abuse-heavy TLD .top
Target did not respond (DNS/connection failure or timeout); verdict from URL structure only

Observed indicators

g.top-h.top
https://g.top-h.top/

Other scans of g.top-h.top (5)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

23 Aug 2026 - unknown
21 Aug 2026 - unknown
20 Aug 2026 - unknown
16 Aug 2026 - unknown
14 Aug 2026 - unknown

Questions about g.top-h.top

Is g.top-h.top safe?: The scan of g.top-h.top on 21 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with g.top-h.top?: 5 analysed samples communicate with this URL.
How was g.top-h.top checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of g.top-h.top

Scanned on MalwareAnalyzer by Cyble · Open interactive scan