SSLBL | SSL Certificate: SHA1 ".$row['sha1']."\n"; if($row['malicious']) { echo "\n"; echo "\n"; } else { echo "\n"; echo "\n"; } } else { echo "SSLBL | Malicious SSL Certificates\n"; echo "\n"; echo "\n"; } } else { echo "SSLBL | Malicious SSL Certificates\n"; echo "\n"; echo "\n"; } } else { echo "SSLBL | Malicious SSL Certificates\n"; echo "\n"; echo "\n"; } ?>

SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint .

Database Entry

SHA1 Fingerprint:
Certificate Common Name (CN):
Issuer Distinguished Name (DN):
TLS Version:
First seen: UTC
Last seen:
Status:Blacklisted
Listing reason:
Listing date:
Malware samples:
Botnet C&Cs:

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

fetch_array()) { $vtlink = $ss['vtlink']; // Ensure that we have a proper VT link if($vtlink) { if(!preg_match("/^https/", $vtlink)) { $vtlink = "https://www.virustotal.com$vtlink"; } } $signature = ''; if($ss['signature']) { if($ss['malpedia']) { $signature = "".$ss['signature']." "; } else { $signature = "".$ss['signature'].""; } } if($vtlink != ''){$vt = "\"Virustotal".$ss['vtresult']." (".$ss['vtpercent']."%)\n";}else{$vt = "n/a";} echo "\n"; } ?>
Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
".$ss['timestamp']."".$ss['fk_hash']."$vt$signature".$ss['dstip'].":".$ss['dstport']."

# of entries: (max: 100)