{
  "generated": "2026-09-15T09:38:11.041Z",
  "source": "https://publicmosaic.com/indicators",
  "tlp": "CLEAR",
  "scope": "template 2166164053c1_2166164053c1_9b8ad8d9ef34 — https://publicmosaic.com/ja4x/2166164053c1_2166164053c1_9b8ad8d9ef34",
  "caveat": "Combine with network scope. A bare JA4X is a certificate template, not an identity: it collides across operators using the same tooling, and a template spanning several families is a library default. `discriminating: false` marks singletons and multi-family templates; JA4X+ entries (template + issuer CN + not_before day) are the finer key.",
  "templates": [
    {
      "ja4x": "2166164053c1_2166164053c1_9b8ad8d9ef34",
      "url": "/ja4x/2166164053c1_2166164053c1_9b8ad8d9ef34",
      "hosts": 6,
      "listed": 6,
      "families": [
        "overlord"
      ],
      "networks": [
        272547,
        213702,
        270353,
        8560,
        203273
      ],
      "first_seen": "2026-09-02T09:54:14.504Z",
      "last_seen": "2026-09-15T00:45:04.157Z",
      "discriminating": true,
      "plus": [
        {
          "issuer_cn": "host-2a28502566d7cbee.invalid",
          "not_before_day": "2026-09-04",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "host-75ee6bb612484a45.invalid",
          "not_before_day": "2026-09-03",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-06-03",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-06-15",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-08-03",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-08-26",
          "hosts": 1,
          "listed": 1
        }
      ]
    }
  ]
}