The scan of top4top.io on 23 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with top4top.io?

3 analysed samples communicate with this URL.

How was top4top.io checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

top4top.io - URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned top4top.io and returned a unknown verdict (score -12). The page resolved to 188.165.137.138 on OVH HOSTING OY in FR. 1 domain and 2 IPs were contacted. 3 malware samples communicate with this URL. The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: http://top4top.io/ads/adpull.php?n=1&w=250&h=250&call=js&t=banner
Domain: top4top.io · IP: 188.165.137.138 · AS16276 · FR
Server: HotCores
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 30 00: · subject CN=top4top.io
Scan tier: fast · observed 2026-08-23 23:32:23 UTC

Redirect chain

http://top4top.io/ads/adpull.php?n=1&w=250&h=250&call=js&t=banner
https://top4top.io/ads/adpull.php

Malware communicating with this URL (3)

These samples were observed contacting or being served from top4top.io. Each links to its full analysis.

4e22aaa664629d7022b54109a521d65f39a3fa1af46ad1a26839b0b3575892af - referenced · 4e22aaa664629d7022b54109a521d65f · first seen 2026-08-23
e0d94f55cd28a11f4a0ec27537b291a1f87f98a8cf5a6e1d509e13850a41acc9 - referenced · e0d94f55cd28a11f4a0ec27537b291a1 · first seen 2026-08-21
502a54869bfba85d39a0a26b00a352a46696f98f39f2b0c9d298309d7a908422 - referenced · 502a54869bfba85d39a0a26b00a352a4 · first seen 2026-08-15

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Contacted infrastructure

188.165.137.138 - AS16276 OVH HOSTING OY (France)
188.165.137.170 - AS16276 OVH HOSTING OY (France)

Observed indicators

top4top.io
188.165.137.138
188.165.137.170
https://top4top.io/ads/adpull.php

Other scans of top4top.io (6)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

23 Aug 2026 - unknown · https://top4top.io/
21 Aug 2026 - unknown · https://top4top.io/fileuser-218007.html
21 Aug 2026 - unknown · https://top4top.io/
15 Aug 2026 - unknown · https://top4top.io/report-27364000.html
15 Aug 2026 - unknown · https://top4top.io/downloadf-1183u670d1-rar.html
15 Aug 2026 - unknown · https://top4top.io/

Questions about top4top.io

Is top4top.io safe?: The scan of top4top.io on 23 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with top4top.io?: 3 analysed samples communicate with this URL.
How was top4top.io checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of top4top.io

Scanned on MalwareAnalyzer by Cyble · Open interactive scan