# bodytop.top — SUSPICIOUS

> bodytop.top is a phishing site flagged on multiple blocklists. Learn why it’s dangerous and what to do if you visited this suspicious domain.

## Summary
PhishDestroy identifies bodytop.top as a phishing domain that poses a medium-level risk to users. Although currently offline, this site was flagged on two separate security blocklists and reported by a few security vendors, indicating attempts to deceive visitors. The domain was registered recently, on February 21, 2026, through an overseas registrar, which is common among phishing operations trying to evade detection.

This phishing domain operated by presenting a misleading page titled "Just a moment..." designed to lure users into waiting while malicious scripts potentially harvested sensitive information such as login credentials or personal data. The domain resolved to IP address 209.94.90.1, which may have hosted deceptive content or redirected users to fraudulent sites. Such tactics aim to exploit user trust and trick them into divulging confidential details.

If you have visited bodytop.top, it is important to remain vigilant. Do not enter any personal or financial information on suspicious sites, and if you did, immediately change passwords associated with any accounts that might be compromised. Run a full antivirus scan on your device and monitor your accounts for unusual activity. Reporting the incident to your IT department or a cybersecurity professional can help mitigate potential harm. Staying informed about domains like bodytop.top helps enhance your online safety.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: 耐思尼克国际集团有限公司
- Country: HK
- IP: 209.94.90.1
- IP Org: Cloudflare CDN
- Nameservers: ["coen.ns.cloudflare.com.", "tia.ns.cloudflare.com."]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["CRDF", "Fortinet", "Gridinsoft"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0199c9be-5692-75df-b066-114478375097.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/ebbfbaf4-1161-48cb-90e7-9a5afdfbc1f7
- PhishDestroy: https://phishdestroy.io/domain/bodytop.top/
- LLM endpoint: https://phishdestroy.io/domain/bodytop.top/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bodytop.top/
Last updated: 2026-03-19