{
  "generated": "2026-09-15T09:38:11.041Z",
  "source": "https://publicmosaic.com/indicators",
  "tlp": "CLEAR",
  "scope": "template 2166164053c1_2166164053c1_30d204a01551 — https://publicmosaic.com/ja4x/2166164053c1_2166164053c1_30d204a01551",
  "caveat": "Combine with network scope. A bare JA4X is a certificate template, not an identity: it collides across operators using the same tooling, and a template spanning several families is a library default. `discriminating: false` marks singletons and multi-family templates; JA4X+ entries (template + issuer CN + not_before day) are the finer key.",
  "templates": [
    {
      "ja4x": "2166164053c1_2166164053c1_30d204a01551",
      "url": "/ja4x/2166164053c1_2166164053c1_30d204a01551",
      "hosts": 271,
      "listed": 271,
      "families": [
        "cobalt_strike"
      ],
      "networks": [
        45090,
        137718,
        37963,
        135330,
        152194,
        134835,
        401701,
        132883,
        36007,
        36352,
        17621,
        398478,
        20473,
        60781,
        141679,
        134420,
        55990,
        133380,
        137699,
        23724,
        31898,
        19318,
        135905,
        4134,
        51852,
        14061,
        216071,
        9009,
        201814,
        199925,
        212238,
        135377,
        142403,
        140227,
        399077,
        401696,
        134365,
        62468,
        3527,
        149107,
        202412,
        51167,
        154321,
        43180,
        61138,
        63949,
        32097,
        200019,
        25820,
        16276,
        399486,
        38365,
        35916,
        134763,
        62005,
        35000,
        213194,
        208185,
        8075,
        400619,
        139659,
        215311,
        12975,
        399629,
        8560,
        45899,
        56046,
        152918,
        396982,
        15169,
        9808,
        932,
        45102,
        132203,
        138195,
        401615,
        55933,
        142637,
        205759,
        14618,
        4837,
        38283,
        141995,
        138997,
        202799,
        56971
      ],
      "first_seen": "2026-08-22T23:58:44.443Z",
      "last_seen": "2026-09-15T03:42:18.288Z",
      "discriminating": true,
      "plus": [
        {
          "issuer_cn": null,
          "not_before_day": "2015-05-20",
          "hosts": 100,
          "listed": 100
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2022-08-30",
          "hosts": 32,
          "listed": 32
        },
        {
          "issuer_cn": "*.microsoft.com",
          "not_before_day": "2023-07-04",
          "hosts": 9,
          "listed": 9
        },
        {
          "issuer_cn": "www.infoworld.com",
          "not_before_day": "2023-02-14",
          "hosts": 7,
          "listed": 7
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2019-06-14",
          "hosts": 4,
          "listed": 4
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-09-02",
          "hosts": 3,
          "listed": 3
        },
        {
          "issuer_cn": "Outlook.live.com",
          "not_before_day": "2026-06-13",
          "hosts": 3,
          "listed": 3
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2019-03-16",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-07-06",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-07-20",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-07-24",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-09-05",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-09-07",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-08-06",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-08-20",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-08-23",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-09-03",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "baidu.com",
          "not_before_day": "2026-09-04",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "jquery.com",
          "not_before_day": "2026-09-10",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "login.live.com",
          "not_before_day": "2026-08-13",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "*.360.net",
          "not_before_day": "2026-07-02",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "*.cloudflare.com",
          "not_before_day": "2026-09-09",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "*.microsoft.com",
          "not_before_day": "2022-06-03",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "*.microsoft.com",
          "not_before_day": "2022-06-12",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "*.microsoft.com",
          "not_before_day": "2026-03-04",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "*.microsoft.com",
          "not_before_day": "2026-07-02",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "*.microsoft.com",
          "not_before_day": "2026-09-06",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "DigiCert Global Root G2",
          "not_before_day": "2026-08-30",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "DigiCert Global Root G2",
          "not_before_day": "2026-08-31",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Google Spider",
          "not_before_day": "2026-06-13",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Google Spider",
          "not_before_day": "2026-08-31",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Google Spider",
          "not_before_day": "2026-09-05",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2017-09-27",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2020-06-16",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2021-04-12",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2022-10-11",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2023-04-23",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2024-01-15",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2025-05-05",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2025-05-10",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2025-09-25",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2025-10-16",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2025-11-01",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2025-11-03",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2025-11-19",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2025-12-03",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2025-12-11",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2025-12-26",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2025-12-29",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-01-20",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-02-05",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-02-13",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-03-01",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-03-17",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-03-23",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-04-03",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-04-10",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-05-04",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-05-16",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-05-22",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-05-28",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-06-01",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-06-08",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-06-10",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-06-18",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-06-27",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-07-03",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-07-09",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-07-10",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-07-15",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-07-16",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-07-17",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-07-21",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-07-23",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-08-02",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-08-12",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-08-13",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-08-14",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-08-17",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-08-22",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-08-28",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-08-30",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-08-31",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Major Cobalt Strike",
          "not_before_day": "2026-09-04",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Microsoft Windows",
          "not_before_day": "2026-06-21",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "MicrosoftUpdates",
          "not_before_day": "2024-04-11",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Outlook.live.com",
          "not_before_day": "2025-11-07",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2024-05-01",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2024-07-23",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2024-12-26",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2025-04-07",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2025-10-29",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2025-11-16",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2025-12-16",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-01-14",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-04-01",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-04-27",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-05-18",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-05-19",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-06-02",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-06-09",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-06-16",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-06-24",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-06-30",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-07-12",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-07-20",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-07-23",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-07-25",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-07-29",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-08-03",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-08-05",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-08-08",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-08-12",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-08-13",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-08-25",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-09-02",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "Pwn3rs Striked",
          "not_before_day": "2026-09-05",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "cdn.static-lib.com",
          "not_before_day": "2026-08-26",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "edge-3lxq2.bunny.run",
          "not_before_day": "2026-07-28",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "foren.zik",
          "not_before_day": "2026-08-23",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "france.net",
          "not_before_day": "2026-07-16",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "india",
          "not_before_day": "2026-08-08",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "jquery.com",
          "not_before_day": "2026-02-09",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "jquery.com",
          "not_before_day": "2026-07-04",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "jquery.com",
          "not_before_day": "2026-07-13",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "jquery.com",
          "not_before_day": "2026-08-05",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "jquery.com",
          "not_before_day": "2026-08-06",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "jquery.com",
          "not_before_day": "2026-09-02",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "jquery.com",
          "not_before_day": "2026-09-09",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "telemetry.cloudflare-cdn.net",
          "not_before_day": "2026-08-18",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "telemetry.cloudflare-cdn.net",
          "not_before_day": "2026-08-24",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "telemetry.cloudflare-cdn.net",
          "not_before_day": "2026-09-11",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "www.baidu.com",
          "not_before_day": "2026-08-30",
          "hosts": 1,
          "listed": 1
        }
      ]
    }
  ]
}