CONTINUOUS INTERNET TELEMETRY24H DRIFT8,098 material changesacross 7,784 domainsDNS DRIFT580 domains changed DNS providertop destination parity.domainsEMAIL DRIFT110 domains switched email providertop destination google.comCERT DRIFT182 domains switched issuing CA24hNOW1,631 curated domains not reachable-1,079 vs yesterdaySITE ERRORS20,605 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED93,370 throttled or blocked our scanner429 rate-limit / 403 bot-block

ccleaner.com

Observed Jul 22, 2026, 00:11 UTC (16h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onAmazon
Email byMicrosoft 365
Secured byAmazon
Registered withMarkMonitor Inc.
Also usesGoogle Search Console
1 subdomain · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ccleaner.com actually stands on - every host below is a signed observation
ccleaner.com
A / AAAA
18.67.76.6418.67.76.8518.67.76.8818.67.76.97
Amazonserves the site
NS
ns-1031.awsdns-00.orgns-156.awsdns-19.comns-2046.awsdns-63.co.ukns-859.awsdns-43.net
awsdns-00.org + awsdns-19.com + moreanswers its DNS
MX
ccleaner-com.mail.protection.outlook.com
Microsoft 365receives its email
TLS
ccleaner.com
Amazonissued its certificate

DNS Records

A 4

  • 18.67.76.64
  • 18.67.76.85
  • 18.67.76.88
  • 18.67.76.97

MX 1

  • 0ccleaner-com.mail.protection.outlook.com

TXT 8

  • 00db0000000z3sfeak
  • 6tqp2v75j6jgp0k5h5fbhw257xtz8d71
  • MS=CDE7E348EFA6EF1FE62522269A809C930BF71C2C
  • MS=ms27095036
  • google-site-verification=O6qPediOZ4DJ1OJDeTDc8DAhM1czeBj-mgPVgso_vqQ
  • google-site-verification=qL50LlU6wjnWyGa3uQ1yvqZ1XjWmHw497K9BOEwXLK0
  • v=spf1 include:_spf.google.com include:_spf.salesforce.com include:_spf.qualtrics.com include:spf.protection.outlook.com ip4:103.151.192.0/23 ip4:185.12.80.0/22 ip4:188.172.128.0/20 ip4:192.161.144.0/20 ip4:216.198.0.0/18 -all
  • v=DMARC1; p=quarantine; sp=none; rua=mailto:c3_admin+rua@ccleaner.com; ruf=mailto:c3_admin+ruf@ccleaner.com; rf=afrf; pct=100; ri=86400

NS 4

  • ns-1031.awsdns-00.org
  • ns-156.awsdns-19.com
  • ns-2046.awsdns-63.co.uk
  • ns-859.awsdns-43.net

SOA 1

  • ns-2046.awsdns-63.co.uk awsdns-hostmaster.amazon.com

CAA 5

  • issue "amazon.com"
  • issue "digicert.com"
  • issue "letsencrypt.org"
  • issue "pki.goog"
  • issue "sectigo.com"

TLS Certificates (3)

Common NameIssuerExpires
ccleaner.com C=US, O=Amazon, CN=Amazon RSA 2048 M01 Sat, 23 Jan 2027 23:59:59 +0000
Amazon RSA 2048 M01 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:21:28 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ccleaner.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ccleaner.com <a href="https://domaindrift.io/t/ccleaner.com"> <img src="https://domaindrift.io/badge/ccleaner.com.svg" width="300" height="64" alt="DomainDrift signed observations for ccleaner.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_432f50307e112eec
Output Hash
622a502b8754f55160941ec00a7c7892f6e526eab8b89e04f3a823198cb6a76d
Signature
ed25519:c800184beefa14afcf65096c2fdb0648ffdac0721251052a43ad912c6abae6b470c98088c34684d9872e942172a772f4acc2e6972e0241434b88c89a94dfa303
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser