Report Overview
Visitedpublic
2026-07-22 21:53:18
Tags
Submit Tags
URL
ccleaner.lol/
Finishing URL
ccleaner.lol/
IP / ASN
172.67.162.22
Title
Ultra Cleaner - GOOGLE PLAY
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
ccleaner.lol 18 alert(s) on this Host | unknown | 2026-07-20 | 2026-07-22 | 2026-07-22 | 4.0 kB | 203 kB | 104.21.34.152 |  |
api.telegram.org | 206724 | 2003-12-15 | 2015-06-25 | 2026-07-21 | 1.2 kB | 724 B |  149.154.166.110 |  |
cdn-icons-png.flaticon.com | 239972 | 2013-05-10 | 2021-09-02 | 2026-07-17 | 555 B | 16 kB |  23.36.76.123 |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Nginx:1.30.1 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | ccleaner.lol/ | malware | Detects file containing Telegram Bot API |
| Cloudflare DNS | ccleaner.lol | malicious | Sinkholed |
| Hagezi Threat Feed | ccleaner.lol | malicious | Sinkholed |
JavaScript (1)
No JavaScripts
HTTP Transactions (11)
| URL | IP | Response | Size |
|---|