SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint d4ea5c5ed890d658f9ef23555e312c694793d831.
Database Entry
| SHA1 Fingerprint: | d4ea5c5ed890d658f9ef23555e312c694793d831 |
|---|---|
| Certificate Common Name (CN): | kidsko.shop |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-06-17 08:54:54 UTC |
| Last seen: | 2026-06-20 03:23:50 UTC |
| Status: | Blacklisted |
| Listing reason: | Vidar C&C |
| Listing date: | 2026-06-20 06:23:55 |
| Malware samples: | 12 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-06-20 03:23:50 | 430ebd1df2a3e809d66b2c53014ada9f | n/a | 104.21.8.29:443 | |
| 2026-06-19 21:01:57 | 536f8e1eaa50b5979e36a6ee9252ceb1 | n/a | 104.21.8.29:443 | |
| 2026-06-19 15:21:55 | 07388a4ece39d21469665c94fe3a9c09 | n/a | 104.21.8.29:443 | |
| 2026-06-19 06:06:42 | 28efe5a620b4e30c6a573a33bb1cbda9 | n/a | 104.21.8.29:443 | |
| 2026-06-19 04:37:40 | 545294376fb4bff33b8c0337cea0f7e2 | n/a | 104.21.8.29:443 | |
| 2026-06-19 03:46:33 | 6edf5794c3bd9ddd37cf4c3a8bed11b8 | n/a | 104.21.8.29:443 | |
| 2026-06-18 20:47:07 | 5665ceb26ffd7cda0855d1ba20d86eb7 | n/a | 172.67.156.185:443 | |
| 2026-06-18 15:03:02 | b6928921ecf3c8e708fb78c46e196889 | n/a | 104.21.8.29:443 | |
| 2026-06-18 09:18:31 | b50f80de42d179d2f11e8c1db6e21834 | n/a | 104.21.8.29:443 | |
| 2026-06-18 08:22:21 | c9ef2cb55cfd2f7e6672136449a7abfd | n/a | 104.21.8.29:443 | |
| 2026-06-17 15:29:02 | 8be5f2f596ac965746c2ff4e1c5ee8e3 | n/a | 172.67.156.185:443 | |
| 2026-06-17 08:54:54 | f95bf72ef9d7fed55d015ec11dfe6d7a | n/a | 172.67.156.185:443 |
# of entries: 12 (max: 100)