tls-reputation.comTLS fingerprint reputation

unrecognised fingerprint

t12d590500_7bd0586cbef7_22a92d800fe4

Deterministic client

One JA3 across every connection — a deterministic stack, the shape of a library or command-line client, with no catalogue name yet.

TLS 1.2no ALPN2026-07-20 → 2026-07-23
JA4
JA4_r
JA3
JA3_raw
This JA3 resolves unambiguously to the JA4 above.

explore in graph →

Read

catalog identity
No ground-truth build has reproduced this hello yet — absence is not a verdict.
self-randomisation
fixed — one JA3 across 58 connections: a deterministic stack. Libraries and command-line clients look like this.
reach
0.851 roams across 16 domains — spread is how evenly, not how many.

Spread measures reach, not intent: it can’t tell one scraper visiting 500 domains from 500 people visiting one each. Stability is a claim about software — whether the stack is deterministic — nothing about who runs it.

Footprint

58
observations
16
domains reached
2026-07-20
first seen
2026-07-23
last seen

ClientHello anatomy

The underscore groups of JA4_r are the raw cipher suites · extensions · signature algorithms behind the hash.

TLS version
TLS 1.2
ALPN (wire order)
—
EC point formats
0x0000, 0x0001, 0x0002
Post-quantum key share
absent

The post-quantum key share is a structural fact about the hello, not a verdict — GREASE values are flagged the same neutral way.

cipher suites(59)
  1. 00xc030TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  2. 10xc02cTLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
  3. 20xc028TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
  4. 30xc024TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
  5. 40xc014TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
  6. 50xc00aTLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
  7. 60x00a3TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
  8. 70x009fTLS_DHE_RSA_WITH_AES_256_GCM_SHA384
  9. 80x006bTLS_DHE_RSA_WITH_AES_256_CBC_SHA256
  10. 90x006aTLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  11. 100x0039TLS_DHE_RSA_WITH_AES_256_CBC_SHA
  12. 110x0038TLS_DHE_DSS_WITH_AES_256_CBC_SHA
  13. 120x0088unknown (0x0088)
  14. 130x0087unknown (0x0087)
  15. 140xc032unknown (0xc032)
  16. 150xc02eunknown (0xc02e)
  17. 160xc02aunknown (0xc02a)
  18. 170xc026unknown (0xc026)
  19. 180xc00funknown (0xc00f)
  20. 190xc005unknown (0xc005)
  21. 200x009dTLS_RSA_WITH_AES_256_GCM_SHA384
  22. 210x003dTLS_RSA_WITH_AES_256_CBC_SHA256
  23. 220x0035TLS_RSA_WITH_AES_256_CBC_SHA
  24. 230x0084unknown (0x0084)
  25. 240xc012unknown (0xc012)
  26. 250xc008unknown (0xc008)
  27. 260x0016unknown (0x0016)
  28. 270x0013unknown (0x0013)
  29. 280xc00dunknown (0xc00d)
  30. 290xc003unknown (0xc003)
  31. 300x000aunknown (0x000a)
  32. 310xc02fTLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  33. 320xc02bTLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  34. 330xc027TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  35. 340xc023TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
  36. 350xc013TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
  37. 360xc009TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
  38. 370x00a2TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  39. 380x009eTLS_DHE_RSA_WITH_AES_128_GCM_SHA256
  40. 390x0067TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
  41. 400x0040TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  42. 410x0033TLS_DHE_RSA_WITH_AES_128_CBC_SHA
  43. 420x0032TLS_DHE_DSS_WITH_AES_128_CBC_SHA
  44. 430x009aunknown (0x009a)
  45. 440x0099unknown (0x0099)
  46. 450x0045unknown (0x0045)
  47. 460x0044unknown (0x0044)
  48. 470xc031unknown (0xc031)
  49. 480xc02dunknown (0xc02d)
  50. 490xc029unknown (0xc029)
  51. 500xc025unknown (0xc025)
  52. 510xc00eunknown (0xc00e)
  53. 520xc004unknown (0xc004)
  54. 530x009cTLS_RSA_WITH_AES_128_GCM_SHA256
  55. 540x003cTLS_RSA_WITH_AES_128_CBC_SHA256
  56. 550x002fTLS_RSA_WITH_AES_128_CBC_SHA
  57. 560x0096unknown (0x0096)
  58. 570x0041unknown (0x0041)
  59. 580x00ffTLS_EMPTY_RENEGOTIATION_INFO
extensions(5)sorted
  1. 00x0000server_name (SNI)
  2. 10x000asupported_groups
  3. 20x000bec_point_formats
  4. 30x000dsignature_algorithms
  5. 40x000fheartbeat

Stored sorted — under one JA4 the wire order varies by construction, so no single order is “the” order.

curves / groups(25)
  1. 00x000eunknown (0x000e)
  2. 10x000dunknown (0x000d)
  3. 20x0019secp521r1 (P-521)
  4. 30x000bunknown (0x000b)
  5. 40x000cunknown (0x000c)
  6. 50x0018secp384r1 (P-384)
  7. 60x0009unknown (0x0009)
  8. 70x000aunknown (0x000a)
  9. 80x0016unknown (0x0016)
  10. 90x0017secp256r1 (P-256)
  11. 100x0008unknown (0x0008)
  12. 110x0006unknown (0x0006)
  13. 120x0007unknown (0x0007)
  14. 130x0014unknown (0x0014)
  15. 140x0015unknown (0x0015)
  16. 150x0004unknown (0x0004)
  17. 160x0005unknown (0x0005)
  18. 170x0012unknown (0x0012)
  19. 180x0013unknown (0x0013)
  20. 190x0001unknown (0x0001)
  21. 200x0002unknown (0x0002)
  22. 210x0003unknown (0x0003)
  23. 220x000funknown (0x000f)
  24. 230x0010unknown (0x0010)
  25. 240x0011unknown (0x0011)
signature algorithms(15)
  1. 00x0601rsa_pkcs1_sha512
  2. 10x0602ecdsa_secp521r1_sha512
  3. 20x0603ecdsa_secp521r1_sha512
  4. 30x0501rsa_pkcs1_sha384
  5. 40x0502ecdsa_secp384r1_sha384
  6. 50x0503ecdsa_secp384r1_sha384
  7. 60x0401rsa_pkcs1_sha256
  8. 70x0402rsa_pkcs1_sha384
  9. 80x0403ecdsa_secp256r1_sha256
  10. 90x0301rsa_pkcs1_sha256 (legacy)
  11. 100x0302rsa_pkcs1_sha384 (legacy)
  12. 110x0303rsa_pkcs1_sha512 (legacy)
  13. 120x0201rsa_pkcs1_sha1
  14. 130x0202unknown (0x0202)
  15. 140x0203ecdsa_sha1

Reach — domains contacted

Top 15 of 16. Share is the fraction of this fingerprint’s observations reaching each name.