n.top - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned n.top and returned a unknown verdict (score 12). 1 domain and 0 IPs were contacted. 38 malware samples communicate with this URL (Smuggling). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 12) · Confidence 18%
- Scanned URL:
https://n.top/ - Domain: n.top
- Scan tier: fast · observed 2026-08-21 20:18:34 UTC
Malware communicating with this URL (38)
These samples were observed contacting or being served from n.top. Each links to its full analysis.
- 6922ab9500e548a2c8b6d9892b80718faed2b617dcfa3c6b3e67970ef29da3ee - referenced ·
6922ab9500e548a2c8b6d9892b80718f· first seen 2026-08-21 - be1d2d89603182c19507a2c8a80afa45cab9aa9b228db4eb88e4a5c335b11668 - referenced ·
be1d2d89603182c19507a2c8a80afa45· first seen 2026-08-21 - a1be19891b68ad0da52007a4aeca67dc004dc1332706c5718628a1a62ea1d833 - referenced ·
a1be19891b68ad0da52007a4aeca67dc· first seen 2026-08-21 - 89ebdda5f0fde21dff7e4309a83f1211c6f4f852b8518fa40f6635a98f7b8f03 - referenced ·
89ebdda5f0fde21dff7e4309a83f1211· first seen 2026-08-21 - 5e9d8d758a6195b29c57ca50480475e708ff3474ad797abd3738128ede0bb2f1 - referenced ·
5e9d8d758a6195b29c57ca50480475e7· first seen 2026-08-20 - bd2e66c8b696636770aa6712fade35ba2d368a0810dcd21f0206ce9de9a1dc87 - referenced ·
bd2e66c8b696636770aa6712fade35ba· first seen 2026-08-20 - Smuggling - referenced ·
0a671d84672e367bebf78293820b8f9a· first seen 2026-08-20 - 760d803a44e22be43986ceafa4f99ac2dc1d211fb01320fcfd7e2f45772b7096 - referenced ·
760d803a44e22be43986ceafa4f99ac2· first seen 2026-08-20 - 78b6852b6ffb3d7dfbe84564a8f262608f798a9c722f43ea6b220bc832b0edf3 - referenced ·
78b6852b6ffb3d7dfbe84564a8f26260· first seen 2026-08-20 - 497c3d3bc4061e06ea844a22b9055f08858688c3e119121be7c571599aea8743 - referenced ·
497c3d3bc4061e06ea844a22b9055f08· first seen 2026-08-20 - bd551bcf712734ec3228165e2745f34e6ded5e1a14b12c22a067d4f6fbb1a9ed - referenced ·
bd551bcf712734ec3228165e2745f34e· first seen 2026-08-20 - debd305c4eda2783cd9ad468373635b6754b22c379cfcbebb99a96908fb601fb - referenced ·
debd305c4eda2783cd9ad468373635b6· first seen 2026-08-20 - 3d8b407f6823d3b9dfb08ec1de5362790fc714ce995fafe755483c7e46b12348 - referenced ·
3d8b407f6823d3b9dfb08ec1de536279· first seen 2026-08-20 - bc5cfe0aa2f68e2bae85b914e2902385b015969253e39a9cb6e03ae0c2e91177 - referenced ·
bc5cfe0aa2f68e2bae85b914e2902385· first seen 2026-08-20 - amp-auto-ads-0.1.js - referenced ·
73fc986b5852b1bc12845e23964d8377· first seen 2026-08-19
Why this verdict
- Abuse-heavy TLD .top
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- n.top
- https://n.top/
Other scans of n.top (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 19 Aug 2026 - unknown
- 17 Aug 2026 - unknown
- 16 Aug 2026 - unknown
Questions about n.top
- Is n.top safe?
- The scan of n.top on 21 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with n.top?
- 38 analysed samples communicate with this URL, including Smuggling.
- How was n.top checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of n.top
Scanned on MalwareAnalyzer by Cyble · Open interactive scan