i.top - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned i.top and returned a unknown verdict (score 12). 1 domain and 0 IPs were contacted. 39 malware samples communicate with this URL (Smuggling). This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 12) · Confidence 18%
- Scanned URL:
https://i.top/ - Domain: i.top
- Scan tier: fast · observed 2026-08-23 13:58:42 UTC
Malware communicating with this URL (39)
These samples were observed contacting or being served from i.top. Each links to its full analysis.
- 13d72132cc2b9a165a1e171e407a3b15b637e1e55a6c20fadd8833e4f5662cd2 - referenced ·
13d72132cc2b9a165a1e171e407a3b15· first seen 2026-08-23 - f826174d982c8dbf3715cfc31a19fc2f43a304efb669d6c5435e41f79d17fcb3 - referenced ·
f826174d982c8dbf3715cfc31a19fc2f· first seen 2026-08-23 - ee3fb0677b1474b10b01b0237027687714acd1e489c703da64306d43ab296d62 - referenced ·
ee3fb0677b1474b10b01b02370276877· first seen 2026-08-23 - ba07693b2870f3e96ac1f87f8e2e03e19d0a97e65c34c1d6fcefa10642c657cc - referenced ·
ba07693b2870f3e96ac1f87f8e2e03e1· first seen 2026-08-22 - f3bc02b1c0926908438063a3a28cf1a5ee38bdae609afea6e27834677f6132d6 - referenced ·
f3bc02b1c0926908438063a3a28cf1a5· first seen 2026-08-22 - f726976d12111292e490c45fb23970af9bf5db2b387c2ce9fd02af82a4a42ed8 - referenced ·
f726976d12111292e490c45fb23970af· first seen 2026-08-22 - 1f08f9f32e11ab34fb2fc342cfdbc346a0c0e0e61c19275041e14d2fd776d4f1 - referenced ·
1f08f9f32e11ab34fb2fc342cfdbc346· first seen 2026-08-22 - 1770e43edfb6328c67612cfe56dd0e0126364d4ed8a3cc280c55f81ff0c2c763 - referenced ·
1770e43edfb6328c67612cfe56dd0e01· first seen 2026-08-22 - 7e921b0e6504812a1688d260e8a33fb3bfc5ca16b7168780fedb213f78576b86 - referenced ·
7e921b0e6504812a1688d260e8a33fb3· first seen 2026-08-22 - Smuggling - referenced ·
630d51fd622d82e09c557c6ded08b3cd· first seen 2026-08-22 - d4c0cf2837e6bc6e247800296d4651083dee265188ab6dbd6c664e29d5f39c3c - referenced ·
d4c0cf2837e6bc6e247800296d465108· first seen 2026-08-22 - 6922ab9500e548a2c8b6d9892b80718faed2b617dcfa3c6b3e67970ef29da3ee - referenced ·
6922ab9500e548a2c8b6d9892b80718f· first seen 2026-08-21 - index.js - referenced ·
0a4c6daf63c7457ac0d9e330202611a3· first seen 2026-08-21 - a1be19891b68ad0da52007a4aeca67dc004dc1332706c5718628a1a62ea1d833 - referenced ·
a1be19891b68ad0da52007a4aeca67dc· first seen 2026-08-21 - afe1da05d0a12dcb18da1115bb2ad53c348a55ff1af8bc3812254c257d259dbb - referenced ·
afe1da05d0a12dcb18da1115bb2ad53c· first seen 2026-08-21
Why this verdict
- Abuse-heavy TLD .top
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- i.top
- https://i.top/
Other scans of i.top (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 19 Aug 2026 - unknown
- 15 Aug 2026 - unknown
- 14 Aug 2026 - unknown
- 14 Aug 2026 - unknown
- 13 Aug 2026 - unknown
Questions about i.top
- Is i.top safe?
- The scan of i.top on 23 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with i.top?
- 39 analysed samples communicate with this URL, including Smuggling.
- How was i.top checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of i.top
Scanned on MalwareAnalyzer by Cyble · Open interactive scan