i.top - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned i.top and returned a unknown verdict (score 12). 1 domain and 0 IPs were contacted. 29 malware samples communicate with this URL (Smuggling, Gootloader). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 12) · Confidence 18%
- Scanned URL:
https://i.top/ - Domain: i.top
- Scan tier: fast · observed 2026-08-22 02:41:41 UTC
Malware communicating with this URL (29)
These samples were observed contacting or being served from i.top. Each links to its full analysis.
- d4c0cf2837e6bc6e247800296d4651083dee265188ab6dbd6c664e29d5f39c3c - referenced ·
d4c0cf2837e6bc6e247800296d465108· first seen 2026-08-22 - 6922ab9500e548a2c8b6d9892b80718faed2b617dcfa3c6b3e67970ef29da3ee - referenced ·
6922ab9500e548a2c8b6d9892b80718f· first seen 2026-08-21 - index.js - referenced ·
0a4c6daf63c7457ac0d9e330202611a3· first seen 2026-08-21 - a1be19891b68ad0da52007a4aeca67dc004dc1332706c5718628a1a62ea1d833 - referenced ·
a1be19891b68ad0da52007a4aeca67dc· first seen 2026-08-21 - afe1da05d0a12dcb18da1115bb2ad53c348a55ff1af8bc3812254c257d259dbb - referenced ·
afe1da05d0a12dcb18da1115bb2ad53c· first seen 2026-08-21 - 1f6fb7a49842ec2da116249f8d2b33aa3737b69fbda2f93a7206b007f3c5b20b - referenced ·
1f6fb7a49842ec2da116249f8d2b33aa· first seen 2026-08-20 - Smuggling - referenced ·
0a671d84672e367bebf78293820b8f9a· first seen 2026-08-20 - 497c3d3bc4061e06ea844a22b9055f08858688c3e119121be7c571599aea8743 - referenced ·
497c3d3bc4061e06ea844a22b9055f08· first seen 2026-08-20 - bd551bcf712734ec3228165e2745f34e6ded5e1a14b12c22a067d4f6fbb1a9ed - referenced ·
bd551bcf712734ec3228165e2745f34e· first seen 2026-08-20 - bc5cfe0aa2f68e2bae85b914e2902385b015969253e39a9cb6e03ae0c2e91177 - referenced ·
bc5cfe0aa2f68e2bae85b914e2902385· first seen 2026-08-20 - ce870e4f0402de2ba991659e33cc040402f37dbd684b4f54acbf4139941dbf50 - referenced ·
ce870e4f0402de2ba991659e33cc0404· first seen 2026-08-20 - fad1c38d261556b10b33fffff80563064735bdfb511766f78a93c0eb9fcd8d30 - referenced ·
fad1c38d261556b10b33fffff8056306· first seen 2026-08-19 - fe47c899d05a1f5bafd6f9432e67c58fb6091399d6387b70a0fcb541895896b4 - referenced ·
fe47c899d05a1f5bafd6f9432e67c58f· first seen 2026-08-19 - Gootloader - referenced ·
a219dfaf4b5acc45855fdd5fc1e5278f· first seen 2026-08-19 - 60a8a5d0242d70cfd70be8248d655934ba3a1ee9b2e2c4c492e64d5b6d83aa7b - referenced ·
60a8a5d0242d70cfd70be8248d655934· first seen 2026-08-19
Why this verdict
- Abuse-heavy TLD .top
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- i.top
- https://i.top/
Other scans of i.top (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 19 Aug 2026 - unknown
- 15 Aug 2026 - unknown
- 14 Aug 2026 - unknown
- 14 Aug 2026 - unknown
- 13 Aug 2026 - unknown
Questions about i.top
- Is i.top safe?
- The scan of i.top on 22 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with i.top?
- 29 analysed samples communicate with this URL, including Smuggling, Gootloader.
- How was i.top checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of i.top
Scanned on MalwareAnalyzer by Cyble · Open interactive scan