urlquery.net
WEBSITE ANALYSIS REPORT

http://securityboulevard.com/2026/03/fake-cleanmymac-site-installs-shub-stealer-and-backdoors-crypto-wallets/

public
Report tags
Submit tags
Request review

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
http://securityboulevard.com/2026/03/fake-cleanmymac-site-installs-shub-stealer-and-backdoors-crypto-wallets/
Submitted IP / ASN
Country unknown 172.66.146.12 AS13335 · CLOUDFLARENET
Final URL
https://securityboulevard.com/2026/03/fake-cleanmymac-site-installs-shub-stealer-and-backdoors-crypto-wallets/
Final IP / ASN
Country unknown 172.66.146.12 AS13335 · CLOUDFLARENET

Final page

Page title
Fake CleanMyMac site installs SHub Stealer and backdoors crypto wallets - Security Boulevard
Final DOM MIME
text/html; charset=utf-8
Final DOM size
652.9 KB (668557 bytes)

Detections

URLQuery
0
IDS
0
TDS
0

Activity

HTTP requests
203
Observed hosts
14
Script records
86

Estimated HTTP data

Sent
~163.0 KB
Received
~7.66 MB

Page capture

Final browser state

Recorded title

Fake CleanMyMac site installs SHub Stealer and backdoors crypto wallets - Security Boulevard

652.9 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

No detection observations

Absence of findings is not a clean verdict.

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
images.squarespace-cdn.com 380642019-01-242019-02-202026-06-22650 B630 BUnited States 151.101.64.238
static.addtoany.com 282672006-03-102012-05-212026-06-22468 B4.3 KBCountry unknown 104.20.20.192
securityboulevard.com 614832011-03-052017-09-182026-05-01154.8 KB6.35 MBCountry unknown 172.66.146.12
cdnjs.cloudflare.com 12222009-02-172012-05-232026-06-21519 B0 BNot recorded
stats.wp.com 226601997-03-282017-01-302026-06-22460 B0 BNot recorded
secure.gravatar.com 163232004-07-152012-05-222026-06-22482 B0 BNot recorded
ajax.googleapis.com 36912005-01-252012-05-222026-06-22507 B88.3 KBUnited States 142.250.178.106
www.dmca.com 4421702000-05-182012-11-292026-06-20564 B0 BNot recorded
fonts.googleapis.com 3132005-01-252012-05-232026-06-211.0 KB21.7 KBUnited States 142.250.178.106
techstronggroup.com 16953872021-06-052021-06-092026-06-12595 B0 BNot recorded
plausible.io 85652018-12-302019-02-012026-06-22479 B6.7 KBNorway 194.242.11.186
js.hsforms.net 438452013-09-182013-09-262026-06-25930 B1.16 MBCountry unknown 104.16.6.65
cdn-cookieyes.com 98472020-04-222020-04-262026-06-221015 B26.3 KBCountry unknown 104.18.19.62
log.cookieyes.com 393452018-06-032022-05-252026-06-28594 B0 BNot recorded
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot