SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 089632c7578501478cdff49b55c0f035b7aaa98c.
Database Entry
| SHA1 Fingerprint: | 089632c7578501478cdff49b55c0f035b7aaa98c |
|---|---|
| Certificate Common Name (CN): | spybaseball.space |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-02-21 23:00:07 UTC |
| Last seen: | 2026-02-23 03:19:35 UTC |
| Status: | Blacklisted |
| Listing reason: | OffLoader C&C |
| Listing date: | 2026-02-23 07:48:39 |
| Malware samples: | 9 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-02-23 03:19:35 | 1cbc6c539cdd680162503113a19f40a6 | n/a | 172.67.197.33:443 | |
| 2026-02-23 00:22:36 | 1168cb0b255a4c82db93988bb3e1e24b | n/a | 104.21.92.190:443 | |
| 2026-02-23 00:18:35 | 112ddbe218f869714884135dd451cc75 | n/a | 172.67.197.33:443 | |
| 2026-02-23 00:02:25 | 05c7587dda31cc60764446c860d6ab7d | n/a | 172.67.197.33:443 | |
| 2026-02-22 23:24:21 | 05faa60c4c0d27f387db15d35d69ab2b | n/a | 104.21.92.190:443 | |
| 2026-02-22 20:48:59 | 015eaba70794e13bb05ef3e75f1283e6 | n/a | 104.21.92.190:443 | |
| 2026-02-22 18:51:30 | 03aaf3b504041e94c7038f4cd859e759 | n/a | 104.21.92.190:443 | |
| 2026-02-22 18:38:59 | 03d9b82258a0241b14d874ac689472ac | n/a | 104.21.92.190:443 | |
| 2026-02-21 23:00:07 | 10e4c4fac7e08668f17fc08364d48cfa | n/a | 172.67.197.33:443 |
# of entries: 9 (max: 100)