u.top - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned u.top and returned a unknown verdict (score 12). 1 domain and 0 IPs were contacted. 15 malware samples communicate with this URL (Smuggling). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 12) · Confidence 18%
- Scanned URL:
https://u.top/ - Domain: u.top
- Scan tier: fast · observed 2026-08-22 15:18:11 UTC
Malware communicating with this URL (15)
These samples were observed contacting or being served from u.top. Each links to its full analysis.
- 1f08f9f32e11ab34fb2fc342cfdbc346a0c0e0e61c19275041e14d2fd776d4f1 - referenced ·
1f08f9f32e11ab34fb2fc342cfdbc346· first seen 2026-08-22 - Smuggling - referenced ·
630d51fd622d82e09c557c6ded08b3cd· first seen 2026-08-22 - 3238d62b83b80af05528be6cd7264cd75cdddb63261831d9e79a3e9847cee68b - referenced ·
3238d62b83b80af05528be6cd7264cd7· first seen 2026-08-21 - a1be19891b68ad0da52007a4aeca67dc004dc1332706c5718628a1a62ea1d833 - referenced ·
a1be19891b68ad0da52007a4aeca67dc· first seen 2026-08-21 - af58566743c34e35095e39f42bb513b1e20f0aa9bfef04bc2b93747e9eb03d0a - referenced ·
af58566743c34e35095e39f42bb513b1· first seen 2026-08-20 - 497c3d3bc4061e06ea844a22b9055f08858688c3e119121be7c571599aea8743 - referenced ·
497c3d3bc4061e06ea844a22b9055f08· first seen 2026-08-20 - dcca864410f59bd81ef6c43a04b48490fa9427f2fc0e86874a5cb999872f183b - referenced ·
dcca864410f59bd81ef6c43a04b48490· first seen 2026-08-20 - bd551bcf712734ec3228165e2745f34e6ded5e1a14b12c22a067d4f6fbb1a9ed - referenced ·
bd551bcf712734ec3228165e2745f34e· first seen 2026-08-20 - bc5cfe0aa2f68e2bae85b914e2902385b015969253e39a9cb6e03ae0c2e91177 - referenced ·
bc5cfe0aa2f68e2bae85b914e2902385· first seen 2026-08-20 - 6ee6fc892de79953ab678b447151f27578fed64fb77f618c1dc6dcd611c08b11 - referenced ·
6ee6fc892de79953ab678b447151f275· first seen 2026-08-16 - 11ba9e6c2091a692ffc734431fc130be39b3103c60eaa07c0548bab50de11687 - referenced ·
11ba9e6c2091a692ffc734431fc130be· first seen 2026-08-16 - f3a91608f3336e83a2227b52afff45f9ec390a3145032052a4cbbb5ca1a3de3c - referenced ·
f3a91608f3336e83a2227b52afff45f9· first seen 2026-08-15 - 4dc9cd2be5c9964443db4e2abb0487877d8e646c83dbf95b6c04115793434db7 - referenced ·
4dc9cd2be5c9964443db4e2abb048787· first seen 2026-08-14 - codeMirror.bundle.min.js - referenced ·
7b5277fff495c8fc86f70c16bec5efaa· first seen 2026-08-12 - 4edd6e0bd9a145346a9777c16a62a2e20e0dbbf07e4e8db43417a62ee96ab0b7 - referenced ·
4edd6e0bd9a145346a9777c16a62a2e2· first seen 2026-08-11
Why this verdict
- Abuse-heavy TLD .top
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- u.top
- https://u.top/
Other scans of u.top (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 16 Aug 2026 - unknown
- 14 Aug 2026 - unknown
Questions about u.top
- Is u.top safe?
- The scan of u.top on 22 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with u.top?
- 15 analysed samples communicate with this URL, including Smuggling.
- How was u.top checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of u.top
Scanned on MalwareAnalyzer by Cyble · Open interactive scan