tls-reputation.comTLS fingerprint reputation

unrecognised fingerprint

t12d600700_a54dbbc9e493_046e095b7c4a

Deterministic client

One JA3 across every connection — a deterministic stack, the shape of a library or command-line client, with no catalogue name yet.

TLS 1.2no ALPN2026-07-19 → 2026-07-23
JA4
JA4_r
JA3
JA3_raw
This JA3 resolves unambiguously to the JA4 above.

explore in graph →

Read

catalog identity
No ground-truth build has reproduced this hello yet — absence is not a verdict.
self-randomisation
fixed — one JA3 across 17 connections: a deterministic stack. Libraries and command-line clients look like this.
reach
0.874 roams across 2 domains — spread is how evenly, not how many.

Spread measures reach, not intent: it can’t tell one scraper visiting 500 domains from 500 people visiting one each. Stability is a claim about software — whether the stack is deterministic — nothing about who runs it.

Footprint

17
observations
2
domains reached
2026-07-19
first seen
2026-07-23
last seen

ClientHello anatomy

The underscore groups of JA4_r are the raw cipher suites · extensions · signature algorithms behind the hash.

TLS version
TLS 1.2
ALPN (wire order)
—
EC point formats
0x0000, 0x0001, 0x0002
Post-quantum key share
absent

The post-quantum key share is a structural fact about the hello, not a verdict — GREASE values are flagged the same neutral way.

cipher suites(60)
  1. 00xc030TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  2. 10xc02cTLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
  3. 20xc028TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
  4. 30xc024TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
  5. 40xc014TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
  6. 50xc00aTLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
  7. 60x00a3TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
  8. 70x009fTLS_DHE_RSA_WITH_AES_256_GCM_SHA384
  9. 80x006bTLS_DHE_RSA_WITH_AES_256_CBC_SHA256
  10. 90x006aTLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  11. 100x0039TLS_DHE_RSA_WITH_AES_256_CBC_SHA
  12. 110x0038TLS_DHE_DSS_WITH_AES_256_CBC_SHA
  13. 120x0088unknown (0x0088)
  14. 130x0087unknown (0x0087)
  15. 140xc032unknown (0xc032)
  16. 150xc02eunknown (0xc02e)
  17. 160xc02aunknown (0xc02a)
  18. 170xc026unknown (0xc026)
  19. 180xc00funknown (0xc00f)
  20. 190xc005unknown (0xc005)
  21. 200x009dTLS_RSA_WITH_AES_256_GCM_SHA384
  22. 210x003dTLS_RSA_WITH_AES_256_CBC_SHA256
  23. 220x0035TLS_RSA_WITH_AES_256_CBC_SHA
  24. 230x0084unknown (0x0084)
  25. 240xc02fTLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  26. 250xc02bTLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  27. 260xc027TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  28. 270xc023TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
  29. 280xc013TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
  30. 290xc009TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
  31. 300x00a2TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  32. 310x009eTLS_DHE_RSA_WITH_AES_128_GCM_SHA256
  33. 320x0067TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
  34. 330x0040TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  35. 340x0033TLS_DHE_RSA_WITH_AES_128_CBC_SHA
  36. 350x0032TLS_DHE_DSS_WITH_AES_128_CBC_SHA
  37. 360x009aunknown (0x009a)
  38. 370x0099unknown (0x0099)
  39. 380x0045unknown (0x0045)
  40. 390x0044unknown (0x0044)
  41. 400xc031unknown (0xc031)
  42. 410xc02dunknown (0xc02d)
  43. 420xc029unknown (0xc029)
  44. 430xc025unknown (0xc025)
  45. 440xc00eunknown (0xc00e)
  46. 450xc004unknown (0xc004)
  47. 460x009cTLS_RSA_WITH_AES_128_GCM_SHA256
  48. 470x003cTLS_RSA_WITH_AES_128_CBC_SHA256
  49. 480x002fTLS_RSA_WITH_AES_128_CBC_SHA
  50. 490x0096unknown (0x0096)
  51. 500x0041unknown (0x0041)
  52. 510x0007unknown (0x0007)
  53. 520xc012unknown (0xc012)
  54. 530xc008unknown (0xc008)
  55. 540x0016unknown (0x0016)
  56. 550x0013unknown (0x0013)
  57. 560xc00dunknown (0xc00d)
  58. 570xc003unknown (0xc003)
  59. 580x000aunknown (0x000a)
  60. 590x00ffTLS_EMPTY_RENEGOTIATION_INFO
extensions(7)sorted
  1. 00x0000server_name (SNI)
  2. 10x000asupported_groups
  3. 20x000bec_point_formats
  4. 30x000dsignature_algorithms
  5. 40x000fheartbeat
  6. 50x0015padding
  7. 60x3374unknown (0x3374)

Stored sorted — under one JA4 the wire order varies by construction, so no single order is “the” order.

curves / groups(25)
  1. 00x000eunknown (0x000e)
  2. 10x000dunknown (0x000d)
  3. 20x0019secp521r1 (P-521)
  4. 30x000bunknown (0x000b)
  5. 40x000cunknown (0x000c)
  6. 50x0018secp384r1 (P-384)
  7. 60x0009unknown (0x0009)
  8. 70x000aunknown (0x000a)
  9. 80x0016unknown (0x0016)
  10. 90x0017secp256r1 (P-256)
  11. 100x0008unknown (0x0008)
  12. 110x0006unknown (0x0006)
  13. 120x0007unknown (0x0007)
  14. 130x0014unknown (0x0014)
  15. 140x0015unknown (0x0015)
  16. 150x0004unknown (0x0004)
  17. 160x0005unknown (0x0005)
  18. 170x0012unknown (0x0012)
  19. 180x0013unknown (0x0013)
  20. 190x0001unknown (0x0001)
  21. 200x0002unknown (0x0002)
  22. 210x0003unknown (0x0003)
  23. 220x000funknown (0x000f)
  24. 230x0010unknown (0x0010)
  25. 240x0011unknown (0x0011)
signature algorithms(15)
  1. 00x0601rsa_pkcs1_sha512
  2. 10x0602ecdsa_secp521r1_sha512
  3. 20x0603ecdsa_secp521r1_sha512
  4. 30x0501rsa_pkcs1_sha384
  5. 40x0502ecdsa_secp384r1_sha384
  6. 50x0503ecdsa_secp384r1_sha384
  7. 60x0401rsa_pkcs1_sha256
  8. 70x0402rsa_pkcs1_sha384
  9. 80x0403ecdsa_secp256r1_sha256
  10. 90x0301rsa_pkcs1_sha256 (legacy)
  11. 100x0302rsa_pkcs1_sha384 (legacy)
  12. 110x0303rsa_pkcs1_sha512 (legacy)
  13. 120x0201rsa_pkcs1_sha1
  14. 130x0202unknown (0x0202)
  15. 140x0203ecdsa_sha1

Reach — domains contacted

Top 2 of 2. Share is the fraction of this fingerprint’s observations reaching each name.