SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint f14f1a83eddcdf14668e6f09426fc272d71dc371.

Database Entry


SHA1 Fingerprint:f14f1a83eddcdf14668e6f09426fc272d71dc371
Certificate Common Name (CN):efqwnxqwbebyqnbyeybeiurybuyxrfw.site
Issuer Distinguished Name (DN):Let's Encrypt Authority X3
TLS Version:TLSv1
First seen:2018-12-07 02:13:26 UTC
Last seen:2018-12-07 15:18:11 UTC
Status:Blacklisted
Listing reason:Gozi C&C
Listing date:2018-12-08 09:34:36
Malware samples:2
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2018-12-07 15:18:11900d041775d0fad33f4fa56bd74d24f8Virustotal results 11/68 (16.18%) Gozi 144.202.23.191:443
2018-12-07 15:18:11900d041775d0fad33f4fa56bd74d24f8Virustotal results 11/68 (16.18%) Gozi 144.202.23.191:443
2018-12-07 02:13:26343a5a1c746559206868cb9bf9aa2ac5Virustotal results 19/69 (27.54%) Gozi 144.202.23.191:443
2018-12-07 02:13:26343a5a1c746559206868cb9bf9aa2ac5Virustotal results 19/69 (27.54%) Gozi 144.202.23.191:443

# of entries: 4 (max: 100)