TLD Threat Intelligence

Flagged .top Domains

376 domains using the .top extension have been flagged by threat-intelligence feeds. The .top extension is among the most-abused top-level domains in published phishing-landscape data, which is why it appears frequently in scam infrastructure.

376
Flagged Domains
26
Avg Risk Score
May 28
Last Flagged

Flagged .top Domains

60 shown
DomainLast Seen
jmycloud-supp0rt.top May 28 u17o.top May 28 g13a.top May 28 t-mobile.jonfxm.top May 28 t-mobile.feucjl.top May 28 t-mobile.mqwtgf.top May 28 t-mobile.hwsjmc.top May 28 t-mobile.ghrubs.top May 28 t-mobile.datbmq.top May 28 t-mobile.ehqonl.top May 28 t-mobile.edqktw.top May 28 t-mobile.ywbpes.top May 28 t-mobile.tekfvw.top May 28 t-mobile.penfjy.top May 28 t-mobile.nuhieo.top May 28 t-mobile.sngjqx.top May 28 t-mobile.oadjmr.top May 28 t-mobile.syemdb.top May 28 t-mobile.uxikpz.top May 28 t-mobile.fhcoji.top May 28 t-mobile.derjmc.top May 28 t-mobile.egczpf.top May 28 t-mobile.zyhqxp.top May 28 t-mobile.fqypik.top May 28 t-mobile.mnvyku.top May 28 t-mobile.pgvgui.top May 28 t-mobile.evbxip.top May 28 t-mobile.mqldxu.top May 28 t-mobile.rigkbl.top May 28 t-mobile.ulneog.top May 28 t-mobile.uwtiqm.top May 28 t-mobile.mqwjfu.top May 28 t-mobile.cefaxg.top May 28 t-mobile.puqfth.top May 28 t-mobile.nojaly.top May 28 t-mobile.goyhwz.top May 28 t-mobile.bsrlja.top May 28 t-mobile.owpgtu.top May 28 t-mobile.qaszcr.top May 28 g13d.top May 26 m18a.top May 26 b28k.top May 26 u17k.top May 26 b28l.top May 26 g13t.top May 26 k67d.top May 26 g13s.top May 26 dpd.kznwqpltr.top May 25 dpd.tznvlkqpr.top May 25 dpd.bfjklrvqn.top May 25 b28i.top May 25 dpd.shipdora.top May 25 t-mobile.bwvqzj.top May 25 h19w.top May 25 y26u.top May 25 t-mobile.fvypec.top May 25 t-mobile.tvslmz.top May 23 t-mobile.kcuyjo.top May 23 t-mobile.qzdugx.top May 23 t-mobile.qpuzxh.top May 23

Frequently Asked Questions

Are all .top websites scams?

No. The .top extension is among the most-abused top-level domains in published phishing-landscape data, which is why it appears frequently in scam infrastructure. Many legitimate sites use .top. This page lists only the specific .top domains flagged by threat-intelligence feeds — not the extension as a whole.

Why do scammers use .top domains?

Scammers favour cheap, fast-to-register extensions with slower abuse enforcement, because they expect the domain to be taken down within days. Registration cost and enforcement speed — not the extension's purpose — drive the choice.

How do I check if a specific .top site is safe?

Look it up here or on Google Safe Browsing and VirusTotal, and check its registration date with a WHOIS lookup. Very new domains imitating an established brand are a strong warning sign.

🔐Security Partner

Stop the next phishing attack before you click.

NordPass autofill only triggers on real domains. Fake login pages cannot trick it into entering your credentials.

Try NordPass →