SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 8971c7222e26a89b36384e43a37725363170df13.

Database Entry


SHA1 Fingerprint:8971c7222e26a89b36384e43a37725363170df13
Certificate Common Name (CN):passengerbrake.space
Issuer Distinguished Name (DN):WE1
TLS Version:TLS 1.2
First seen:2026-02-26 16:10:09 UTC
Last seen:2026-02-28 11:10:20 UTC
Status:Blacklisted
Listing reason:OffLoader C&C
Listing date:2026-03-02 07:45:09
Malware samples:8
Botnet C&Cs:2

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2026-02-28 11:10:2014623139d5e00ee5f0c95579949fbae8n/a104.21.24.229:443
2026-02-28 09:55:1012d8c0a0c7f312c30f16e01a63ec777fn/a172.67.220.252:443
2026-02-28 08:30:02113e9ee0b45cd5ff01141b7065def265n/a104.21.24.229:443
2026-02-27 21:58:0903a2853108bc19447377e8a1ae4607a4n/a104.21.24.229:443
2026-02-27 20:48:39094d28e694cf6fe10e9d627f84193d8cn/a104.21.24.229:443
2026-02-27 20:17:330567258a04c3823bc3a584f8bf0c0566n/a172.67.220.252:443
2026-02-26 23:21:37021f1b3b71b829de7f061682624ba176n/a172.67.220.252:443
2026-02-26 16:10:09113db4c3cfab157de8399780e7a5b5cbn/a172.67.220.252:443

# of entries: 8 (max: 100)