Security Scan Report: ccleanerwind.top

Submitted: Sep 13, 2026, 1:48:13 PMCompleted: Sep 13, 2026, 1:49:47 PMpubliccompleted

Summary

This website contacted 10 IPs in 3 countries across 7 domains to perform 1 HTTP transaction. The main domain is ccleanerwind.top and was registered 18 years ago.

Submitted URL: https://ccleanerwind.top

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Fake CCleaner download site on a 44-day-old domain. Brand impersonation, a single-source malware indicator, and hostile .top IDS alerts make it unsafe to use.

Risk Factors
Brand impersonation of CCleaner on a mismatched domain
Single-source threat-intel malware match on the primary domain
Domain registered 44 days ago
High IDS alerts for hostile .top domain traffic
Unranked in Cisco Umbrella
Domain age information unavailable

Details

Page Title

Download CCleaner | Clean, optimize & tune up your PC, !

Scan Type

public

Language

馃嚭馃嚫

English

(80% confidence)

Category

technology software

(95%)

Domain Information

Domain 'ccleanerwind.top' uses the .top top-level domain without a subdomain. Count 12 characters in 'ccleanerwind' holding four vowels versus eight consonants. Segmentation suggests 3 words: c, cleaner, wind. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ccleanerwind.top

Page Load Overview

9.93s
Total Load Time
32
HTTP Requests
7
Domains
267 KB
Total Size

Language Analysis

Primary Language

馃嚭馃嚫English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:14,570 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software95% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
95%
forum community discussion
91%
documentation technical
75%
corporate business
70%
news media journalism
39%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.17.24.14CloudflareWAFUnited States
AS13335Cloudflare, Inc.
32.16.204.11AkamaiCDNHamburg, Free and Hanseatic City of Hamburg, Germany
AS20940Akamai International B.V.
3188.114.97.9CloudflareWAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.94GoogleCDNUnited States
AS15169Google LLC
3188.114.96.9CloudflareWAFUnited States
AS13335Cloudflare, Inc.
323.36.162.202AkamaiCDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
32.18.244.4AkamaiCDNSchiphol, North Holland, Netherlands
AS20940Akamai International B.V.
32.18.244.23AkamaiCDNSchiphol, North Holland, Netherlands
AS20940Akamai International B.V.
3142.250.154.95GoogleCDNUnited States
AS15169Google LLC
323.36.162.221AkamaiCDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3210--

Page Statistics

32
Requests
7
Unique Domains
535.3 KB
Total Size

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F9411053AC9488467740E76699C6F01CCE91E107C98C8C62F4CB51AA9FE0FD1C5F726B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:h/iCsU5G/di6bJQewEdb0olBjBfhy934G2oGO38Dy15GY8h+ln1lnPDBEtkMR7yq:cpaG/gqb0o9fs9HS57h+N1NbI9R7TX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1942:AECAABAAIAEIBCQAAAgQAAgAIIQAAAICAAABUAIBgEAAoAAAAAgAAAAAAAqgIAACBAQEAIEhQACAAAEgAAAAAAhIAACQIAAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3e7e7c9ef81c3
Perceptual Hash:f3b78c89cb862689
Difference Hash:400e0e0f1b0b6996
Wavelet Hash:bfc3e7e7c1c50003
Color Hash:#5e783a

Other Hashes

Crop Resistant:400e0e0f1b0b6996

Scan History

Scan history not available

Unable to load historical scan data