tls-reputation.comTLS fingerprint reputation

unrecognised fingerprint

t12d190600_826a7383a64d_3eafcbe19126

Deterministic client

One JA3 across every connection — a deterministic stack, the shape of a library or command-line client, with no catalogue name yet.

TLS 1.2no ALPN2026-07-19 → 2026-07-23
JA4
JA4_r
JA3
JA3_raw

explore in graph →

Read

catalog identity
No ground-truth build has reproduced this hello yet — absence is not a verdict.
self-randomisation
fixed — one JA3 across 148 connections: a deterministic stack. Libraries and command-line clients look like this.
reach
0.960 roams across 114 domains — spread is how evenly, not how many.

Spread measures reach, not intent: it can’t tell one scraper visiting 500 domains from 500 people visiting one each. Stability is a claim about software — whether the stack is deterministic — nothing about who runs it.

Footprint

148
observations
114
domains reached
2026-07-19
first seen
2026-07-23
last seen

ClientHello anatomy

The underscore groups of JA4_r are the raw cipher suites · extensions · signature algorithms behind the hash.

TLS version
TLS 1.2
ALPN (wire order)
—
EC point formats
0x0000, 0x0001, 0x0002
Post-quantum key share
absent

The post-quantum key share is a structural fact about the hello, not a verdict — GREASE values are flagged the same neutral way.

cipher suites(19)
  1. 00xc02bTLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  2. 10xc02fTLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  3. 20x009eTLS_DHE_RSA_WITH_AES_128_GCM_SHA256
  4. 30xc00aTLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
  5. 40xc009TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
  6. 50xc013TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
  7. 60xc014TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
  8. 70xc007unknown (0xc007)
  9. 80xc011unknown (0xc011)
  10. 90x0033TLS_DHE_RSA_WITH_AES_128_CBC_SHA
  11. 100x0032TLS_DHE_DSS_WITH_AES_128_CBC_SHA
  12. 110x0039TLS_DHE_RSA_WITH_AES_256_CBC_SHA
  13. 120x009cTLS_RSA_WITH_AES_128_GCM_SHA256
  14. 130x002fTLS_RSA_WITH_AES_128_CBC_SHA
  15. 140x0035TLS_RSA_WITH_AES_256_CBC_SHA
  16. 150x000aunknown (0x000a)
  17. 160x0005unknown (0x0005)
  18. 170x0004unknown (0x0004)
  19. 180x00ffTLS_EMPTY_RENEGOTIATION_INFO
extensions(6)sorted
  1. 00x0000server_name (SNI)
  2. 10x000asupported_groups
  3. 20x000bec_point_formats
  4. 30x000dsignature_algorithms
  5. 40x000fheartbeat
  6. 50x0023session_ticket

Stored sorted — under one JA4 the wire order varies by construction, so no single order is “the” order.

curves / groups(25)
  1. 00x000eunknown (0x000e)
  2. 10x000dunknown (0x000d)
  3. 20x0019secp521r1 (P-521)
  4. 30x000bunknown (0x000b)
  5. 40x000cunknown (0x000c)
  6. 50x0018secp384r1 (P-384)
  7. 60x0009unknown (0x0009)
  8. 70x000aunknown (0x000a)
  9. 80x0016unknown (0x0016)
  10. 90x0017secp256r1 (P-256)
  11. 100x0008unknown (0x0008)
  12. 110x0006unknown (0x0006)
  13. 120x0007unknown (0x0007)
  14. 130x0014unknown (0x0014)
  15. 140x0015unknown (0x0015)
  16. 150x0004unknown (0x0004)
  17. 160x0005unknown (0x0005)
  18. 170x0012unknown (0x0012)
  19. 180x0013unknown (0x0013)
  20. 190x0001unknown (0x0001)
  21. 200x0002unknown (0x0002)
  22. 210x0003unknown (0x0003)
  23. 220x000funknown (0x000f)
  24. 230x0010unknown (0x0010)
  25. 240x0011unknown (0x0011)
signature algorithms(16)
  1. 00x0601rsa_pkcs1_sha512
  2. 10x0602ecdsa_secp521r1_sha512
  3. 20x0603ecdsa_secp521r1_sha512
  4. 30x0501rsa_pkcs1_sha384
  5. 40x0502ecdsa_secp384r1_sha384
  6. 50x0503ecdsa_secp384r1_sha384
  7. 60x0401rsa_pkcs1_sha256
  8. 70x0402rsa_pkcs1_sha384
  9. 80x0403ecdsa_secp256r1_sha256
  10. 90x0301rsa_pkcs1_sha256 (legacy)
  11. 100x0302rsa_pkcs1_sha384 (legacy)
  12. 110x0303rsa_pkcs1_sha512 (legacy)
  13. 120x0201rsa_pkcs1_sha1
  14. 130x0202unknown (0x0202)
  15. 140x0203ecdsa_sha1
  16. 150x0101unknown (0x0101)

Reach — domains contacted

Top 15 of 114. Share is the fraction of this fingerprint’s observations reaching each name.