n.top - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned n.top and returned a unknown verdict (score 12). 1 domain and 0 IPs were contacted. 45 malware samples communicate with this URL (Smuggling). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 12) · Confidence 18%
- Scanned URL:
https://n.top/ - Domain: n.top
- Scan tier: fast · observed 2026-08-22 23:48:39 UTC
Malware communicating with this URL (45)
These samples were observed contacting or being served from n.top. Each links to its full analysis.
- d371f8da2be7e0d4acb9c7e6050c89dfe51933c53c29b4a9be18c976981e145b - referenced ·
d371f8da2be7e0d4acb9c7e6050c89df· first seen 2026-08-22 - c828ed8736a781c9cab0cfecae84fcdcabd89320767c19272f9e06c0166b8079 - referenced ·
c828ed8736a781c9cab0cfecae84fcdc· first seen 2026-08-22 - f3bc02b1c0926908438063a3a28cf1a5ee38bdae609afea6e27834677f6132d6 - referenced ·
f3bc02b1c0926908438063a3a28cf1a5· first seen 2026-08-22 - 1770e43edfb6328c67612cfe56dd0e0126364d4ed8a3cc280c55f81ff0c2c763 - referenced ·
1770e43edfb6328c67612cfe56dd0e01· first seen 2026-08-22 - d338eb244d8d6b2334e5f261ba1558959e4dfeb75e9d09b5972a15870114b39a - referenced ·
d338eb244d8d6b2334e5f261ba155895· first seen 2026-08-22 - 178f58c015c9e29282f6bebc4b55dc5560345ef6659eb79c18609703fbd13a7e - referenced ·
178f58c015c9e29282f6bebc4b55dc55· first seen 2026-08-22 - Smuggling - referenced ·
ad13fe15582def936d8edae946492709· first seen 2026-08-21 - 6922ab9500e548a2c8b6d9892b80718faed2b617dcfa3c6b3e67970ef29da3ee - referenced ·
6922ab9500e548a2c8b6d9892b80718f· first seen 2026-08-21 - be1d2d89603182c19507a2c8a80afa45cab9aa9b228db4eb88e4a5c335b11668 - referenced ·
be1d2d89603182c19507a2c8a80afa45· first seen 2026-08-21 - a1be19891b68ad0da52007a4aeca67dc004dc1332706c5718628a1a62ea1d833 - referenced ·
a1be19891b68ad0da52007a4aeca67dc· first seen 2026-08-21 - 89ebdda5f0fde21dff7e4309a83f1211c6f4f852b8518fa40f6635a98f7b8f03 - referenced ·
89ebdda5f0fde21dff7e4309a83f1211· first seen 2026-08-21 - 5e9d8d758a6195b29c57ca50480475e708ff3474ad797abd3738128ede0bb2f1 - referenced ·
5e9d8d758a6195b29c57ca50480475e7· first seen 2026-08-20 - bd2e66c8b696636770aa6712fade35ba2d368a0810dcd21f0206ce9de9a1dc87 - referenced ·
bd2e66c8b696636770aa6712fade35ba· first seen 2026-08-20 - Smuggling - referenced ·
0a671d84672e367bebf78293820b8f9a· first seen 2026-08-20 - 760d803a44e22be43986ceafa4f99ac2dc1d211fb01320fcfd7e2f45772b7096 - referenced ·
760d803a44e22be43986ceafa4f99ac2· first seen 2026-08-20
Why this verdict
- Abuse-heavy TLD .top
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- n.top
- https://n.top/
Other scans of n.top (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 19 Aug 2026 - unknown
- 17 Aug 2026 - unknown
- 16 Aug 2026 - unknown
Questions about n.top
- Is n.top safe?
- The scan of n.top on 22 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with n.top?
- 45 analysed samples communicate with this URL, including Smuggling.
- How was n.top checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of n.top
Scanned on MalwareAnalyzer by Cyble · Open interactive scan