Is code-top.shop a scam?

Our automated security review flags code-top.shop as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Is code-top.shop safe to use?

No — code-top.shop scored 25/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.

Does code-top.shop have a valid SSL certificate?

Yes. code-top.shop presents a valid TLSv1.3 certificate issued by Let's Encrypt · E8, expiring in 34 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

Has code-top.shop been flagged by antivirus engines?

1 out of 92 antivirus engines in our malware network flagged code-top.shop as malicious or suspicious (1 outright malicious). Even one detection is a meaningful signal.

Is code-top.shop on any phishing or malware blacklists?

No. code-top.shop is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is code-top.shop hosted?

code-top.shop resolves to an IP operated by JSC TIMEWEB in RU (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the code-top.shop report updated?

We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.

DANGEROUS

Critical risk detected

Digital gift-card reseller with mixed reviews, recent Russian business registration, and one antivirus detection. Our security stack flagged multiple threat indicators on this website. Don't enter personal information, deposit money, or download files.

Security Review

Is code-top.shop legit or a scam?

Name: Is code-top.shop legit or a scam?
Item: code-top.shop
Rating: 2
Author: MalwareTips

Our verdict:Dangerous· 25/100

SafeSuspiciousDangerous

Digital gift-card reseller with mixed reviews, recent Russian business registration, and one antivirus detection.

Top reasons

Business registered only in January 2025 with limited operating history.Conflicting reviews include multiple fraud complaints on Russian sites.Single antivirus engine flagged the page as malicious.

code-top.shopScanned 8d ago

Post Facebook

Trust score

DANGEROUS

Heuristics 24·MT 38

Category tags

digital goodsgift cards#Subscription Trap75% MT confidence

Technical red flags (2)

1 of 92 engines flaggedImpersonates Spotify

Warning signals (1)

Scam-network signals (5/100)

Positive signals (3)

Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

0/92

Engines flagged this URL

Domain Age

—

Registration date unknown

MT Intelligence

Suspicious

Moderate likelihood · 75% confidence

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Moderate scam likelihoodengineMT · Guardiantrust38/100

MT AgentLive web researchVisual inspection

Confidence

The page presents itself as a legitimate reseller of prepaid cards and subscriptions for major entertainment services. The strongest negative signal is the combination of scam reports on independent sites alongside complaints labeling the service as fraudulent. Positive reviews exist on Russian review platforms, yet the business was registered only in January 2025 with active status. One antivirus engine flagged the page as malicious while browser blocklists remained clean and the hosting IP shows no abuse history. These conflicting signals lower our overall trust level for a site handling payments.

Full dossier

Analysis complete

Page Content

The site offers prepaid cards and top-ups for Spotify, Netflix, Xbox, PlayStation, Steam and various games. It displays Russian business details and links to Telegram support but lacks a visible contact email or postal address.

Infrastructure

Valid SSL certificate from Let's Encrypt. Hosting IP has zero abuse reports. Two external analytics and media domains are loaded alongside Telegram.

Domain History

Domain is new with registration tied to a Russian individual entrepreneur registered in January 2025. No long-term history available.

Web Reputation

Independent review sites show both positive user experiences and negative complaints about non-delivery or fraud. One antivirus engine raised a malicious flag.

Risk Factors

Business registered only in January 2025 with limited operating history.
Conflicting reviews include multiple fraud complaints on Russian sites.
Single antivirus engine flagged the page as malicious.

Positive Signals

Hosting IP shows zero abuse reports.
Valid SSL certificate present.
Multiple positive reviews on Russian review platforms averaging high ratings.

AI Recommendation

Avoid entering payment details until you verify recent user experiences on multiple independent forums. Consider using official brand stores or well-known resellers instead.

Next-gen fraud intelligence

Evidence-backedCross-checked

Website Preview

LIVE RENDER

code-top.shop

1Impersonates Spotify

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for code-top.shop, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

Active · Russia

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

2 scam reports · 3 positive

Key findings

7 headline facts from open-web research

- Domain code-top.shop sells digital gift cards, subscriptions (Spotify, Netflix, Xbox, PSN, Apple, Steam) and game top-ups (Brawl Stars, Roblox etc.) targeted at Russian users
- Business registered 22 January 2025 as ИП Бугаевский Артем Алексеевич (ОГРНИП 325080000002193) in Kalmykia, Russia; active status
- otzovik.com lists 154 reviews averaging 4.9/5 with 96% recommendation rate; multiple positive user quotes
- Scamadviser.com flags the site as potential scam and advises extreme caution
- tehnoobzor.com aggregates negative Russian-language reviews labeling it as мошенничество (fraud)
- Active Telegram support @CodeTopShop and presence on Pikabu, DTF, VC.ru as content/blog accounts since 2025
- No evidence of domain being a direct typosquat of major brands; sells codes referencing Spotify etc. but not cloning their sites

Scam reports (2)

Direct quotes from public scam databases, forums, and news.

scamadviser.comopen
"In summary, we scanned code-top.shop for several indicators and we think the website may be a scam. Exercise extreme caution when using this website."
tehnoobzor.comopen
"На платежную систему Code Top shop отзывы публикуются только негативные. Компания обещает вернуть доступ к любимым зарубежным сервисам, помогает обойти ..."

Positive reviews (3)

Quotes indicating the site is legitimate.

otzovik.comopen
"Спасибо огромное Code-Top.Shop, я очень довольна этим сервисом и буду в дальнейшем приобретать товары только у них."
otzovik.comopen
"Я спросил у Алисы где купить бравл пасс+ в 2026 году, она сказала на Code-Top.Shop, и действительно, купил все очень быстро пришло, я доволен!"
otzovik.comopen
"Отзыв: Code-Top.Shop - сервис для оплаты и пополнения популярных игровых платформ из России - Без мошенничества/обмана"

Business registration

Status: active · Russia

ИП Бугаевский Артем Алексеевич, ОГРНИП 325080000002193, ИНН 930702166554, registered 22.01.2025, Republic of Kalmykia; also associated with Oplatym.ru / O-Plati.ru

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Independent review sites contain two scam reports warning of potential fraud and non-delivery. Russian consumer sites show three positive reviews praising fast delivery of game passes and subscriptions. A Russian business registry confirms an active individual entrepreneur registration from January 2025 linked to similar payment services.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Low correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score

0/100

ClearLowModerateHighCritical

Evidence (1)

Short name on low-trust .shop TLD — over-represented on scam farms.

Linked signals (2)

t.mePattern · LOW Trust TLD

Antivirus Engines

Detection matrix · live

1 engine flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

1Malicious0Suspicious59Harmless92Engines

of 92

Webroot

Malicious· malicious

1 antivirus engine flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbers930702005998

Postal addressNot listed

Linked social profiles2

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No postal address visible on the page.
Page impersonates Spotify on a non-official domain.

Phone number listed (930702005998).
Links to 2 social profiles.

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerLet's Encrypt · E8

ExpiresJul 2, 2026 (34d)

Self-signedNo

Hosting & Technology

HostingJSC TIMEWEB

Server locationRU

Web servernginx

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://code-top.shop/
2301https://code-top.shop/
3200https://code-top.shop/ru

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPJSC TIMEWEB

Usage typeData Center/Web Hosting/Transit

Scam-Type Likelihood

2 scam-type patterns detected

Scam-Type Likelihood

0 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Subscription Trap

Subscription Trap

Low-level signals

0/100

AI analyst tagged this as a subscription trap.

Brand Impersonation

Low-level signals

0/100

Page mentions Spotify (non-official domain).

Scam-Type Likelihood

0 of 13 categories showed signals

Top match: Subscription Trap

Subscription Trap

Low-level signals

0/100

AI analyst tagged this as a subscription trap.

Brand Impersonation

Low-level signals

0/100

Page mentions Spotify (non-official domain).

Subscription trap / negative-option billing

This page combines a "free trial" or "$1 trial" pitch with auto-renew / rebill language — a classic negative-option billing trap.

Do not interact with code-top.shop
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
Your card will be charged the full price after the trial
Most subscription traps bill the full amount ($49-$149) 14 days after sign-up, and every month thereafter. "Cancel anytime" often means you must call a foreign support line that's deliberately hard to reach.
If you already signed up — call your bank today
Ask your bank to block future charges from the merchant and dispute any charges already made. Many banks will issue a new card number to prevent recurring billing. Save the confirmation email as evidence.
Report the billing scheme
Report to the FTC (reportfraud.ftc.gov) or your national consumer-protection body — subscription traps are specifically illegal in most jurisdictions when the auto-bill terms aren't clearly disclosed.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

ListedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

mc.yandex.ru companies.rbc.ru klerk.ru pikabu.ru otzovik.com t.me

Safety FAQ

Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.

Our automated security review flags code-top.shop as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Final Verdict

Trust / 100

Final Verdict·code-top.shop

DANGEROUS

This site sells digital gift cards and subscriptions for Spotify, Netflix, Xbox and game top-ups aimed at Russian users. Our analysis flags it as suspicious due to conflicting reviews and a very new business registration. Exercise caution and consider established alternatives for purchases.

Avoid entering payment details until you verify recent user experiences on multiple independent forums. Consider using official brand stores or well-known resellers instead.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Dangerous reports

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.