{
  "generated": "2026-09-15T09:38:11.041Z",
  "source": "https://publicmosaic.com/indicators",
  "tlp": "CLEAR",
  "scope": "template 2bab15409345_2bab15409345_795797892f9c — https://publicmosaic.com/ja4x/2bab15409345_2bab15409345_795797892f9c",
  "caveat": "Combine with network scope. A bare JA4X is a certificate template, not an identity: it collides across operators using the same tooling, and a template spanning several families is a library default. `discriminating: false` marks singletons and multi-family templates; JA4X+ entries (template + issuer CN + not_before day) are the finer key.",
  "templates": [
    {
      "ja4x": "2bab15409345_2bab15409345_795797892f9c",
      "url": "/ja4x/2bab15409345_2bab15409345_795797892f9c",
      "hosts": 21,
      "listed": 20,
      "families": [
        "adaptix",
        "cobalt_strike"
      ],
      "networks": [
        45090,
        135377,
        14956,
        14061,
        54290,
        47890,
        24806,
        54801,
        8560,
        132203,
        48282,
        216071,
        202412
      ],
      "first_seen": "2026-08-25T03:31:49.303Z",
      "last_seen": "2026-09-15T00:46:40.805Z",
      "discriminating": false,
      "plus": [
        {
          "issuer_cn": "adaptix.local",
          "not_before_day": "2026-07-01",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "update.microsoft.com",
          "not_before_day": "2026-09-02",
          "hosts": 2,
          "listed": 2
        },
        {
          "issuer_cn": "194.182.87.116",
          "not_before_day": "2026-08-07",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "api.globaltech.io",
          "not_before_day": "2026-09-10",
          "hosts": 1,
          "listed": 0
        },
        {
          "issuer_cn": "c2.tailc223d4.ts.net",
          "not_before_day": "2026-08-05",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2025-12-22",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-06-06",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-06-17",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-06-27",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-07-22",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-08-12",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-08-16",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-08-18",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-08-20",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-08-22",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "localhost",
          "not_before_day": "2026-09-08",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "update-cdn.net",
          "not_before_day": "2026-03-05",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "update.techcorp.local",
          "not_before_day": "2026-08-31",
          "hosts": 1,
          "listed": 1
        },
        {
          "issuer_cn": "www.google.com",
          "not_before_day": "2026-08-18",
          "hosts": 1,
          "listed": 1
        }
      ]
    }
  ]
}