unrecognised fingerprint
t13d921300_b32209bbeef7_867a32efce91
Too few observations to classify this stack — a handful of connections can't tell a permuting client from coincidence.
- JA4
- JA4_r
- JA3
- JA3_raw
Read
Spread measures reach, not intent: it can’t tell one scraper visiting 500 domains from 500 people visiting one each. Stability is a claim about software — whether the stack is deterministic — nothing about who runs it.
Footprint
ClientHello anatomy
The underscore groups of JA4_r are the raw cipher suites · extensions · signature algorithms behind the hash.
The post-quantum key share is a structural fact about the hello, not a verdict — GREASE values are flagged the same neutral way.
- 00x1302TLS_AES_256_GCM_SHA384
- 10x1301TLS_AES_128_GCM_SHA256
- 20x1303TLS_CHACHA20_POLY1305_SHA256
- 30xc02cTLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- 40xc02bTLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- 50xcca9TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
- 60xc030TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- 70xcca8TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
- 80xc02fTLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- 90x009fTLS_DHE_RSA_WITH_AES_256_GCM_SHA384
- 100xccaaTLS_DHE_RSA_WITH_CHACHA20_POLY1305
- 110x00a3TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
- 120x009eTLS_DHE_RSA_WITH_AES_128_GCM_SHA256
- 130x00a2TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
- 140xc024TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
- 150xc028TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
- 160xc023TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
- 170xc027TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
- 180x006bTLS_DHE_RSA_WITH_AES_256_CBC_SHA256
- 190x006aTLS_DHE_DSS_WITH_AES_256_CBC_SHA256
- 200x0067TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
- 210x0040TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
- 220xc02eunknown (0xc02e)
- 230xc032unknown (0xc032)
- 240xc02dunknown (0xc02d)
- 250xc031unknown (0xc031)
- 260xc026unknown (0xc026)
- 270xc02aunknown (0xc02a)
- 280xc025unknown (0xc025)
- 290xc029unknown (0xc029)
- 300xc00aTLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
- 310xc014TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
- 320xc009TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
- 330xc013TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
- 340x0039TLS_DHE_RSA_WITH_AES_256_CBC_SHA
- 350x0038TLS_DHE_DSS_WITH_AES_256_CBC_SHA
- 360x0033TLS_DHE_RSA_WITH_AES_128_CBC_SHA
- 370x0032TLS_DHE_DSS_WITH_AES_128_CBC_SHA
- 380xc005unknown (0xc005)
- 390xc00funknown (0xc00f)
- 400xc004unknown (0xc004)
- 410xc00eunknown (0xc00e)
- 420x009dTLS_RSA_WITH_AES_256_GCM_SHA384
- 430x009cTLS_RSA_WITH_AES_128_GCM_SHA256
- 440x003dTLS_RSA_WITH_AES_256_CBC_SHA256
- 450x003cTLS_RSA_WITH_AES_128_CBC_SHA256
- 460x0035TLS_RSA_WITH_AES_256_CBC_SHA
- 470x002fTLS_RSA_WITH_AES_128_CBC_SHA
- 480x00ffTLS_EMPTY_RENEGOTIATION_INFO
- 490x00a7unknown (0x00a7)
- 500x00a6unknown (0x00a6)
- 510x006dunknown (0x006d)
- 520xc019unknown (0xc019)
- 530x003aunknown (0x003a)
- 540x006cunknown (0x006c)
- 550xc018unknown (0xc018)
- 560x0034unknown (0x0034)
- 570xc008unknown (0xc008)
- 580xc012unknown (0xc012)
- 590x0016unknown (0x0016)
- 600x0013unknown (0x0013)
- 610xc003unknown (0xc003)
- 620xc00dunknown (0xc00d)
- 630x000aunknown (0x000a)
- 640xc017unknown (0xc017)
- 650x001bunknown (0x001b)
- 660xc007unknown (0xc007)
- 670xc011unknown (0xc011)
- 680x0005unknown (0x0005)
- 690xc002unknown (0xc002)
- 700xc00cunknown (0xc00c)
- 710x0004unknown (0x0004)
- 720xc016unknown (0xc016)
- 730x0018unknown (0x0018)
- 740x0009unknown (0x0009)
- 750x0015unknown (0x0015)
- 760x0012unknown (0x0012)
- 770x001aunknown (0x001a)
- 780x0008unknown (0x0008)
- 790x0014unknown (0x0014)
- 800x0011unknown (0x0011)
- 810x0019unknown (0x0019)
- 820x0003unknown (0x0003)
- 830x0017unknown (0x0017)
- 840x003bunknown (0x003b)
- 850xc006unknown (0xc006)
- 860xc010unknown (0xc010)
- 870x0002unknown (0x0002)
- 880xc001unknown (0xc001)
- 890xc00bunknown (0xc00b)
- 900xc015unknown (0xc015)
- 910x0001unknown (0x0001)
- 00x0000server_name (SNI)
- 10x0005status_request (OCSP)
- 20x000asupported_groups
- 30x000bec_point_formats
- 40x000dsignature_algorithms
- 50x0011unknown (0x0011)
- 60x0017extended_master_secret
- 70x0023session_ticket
- 80x0029unknown (0x0029)
- 90x002bsupported_versions
- 100x002dpsk_key_exchange_modes
- 110x0032unknown (0x0032)
- 120x0033key_share
Stored sorted — under one JA4 the wire order varies by construction, so no single order is “the” order.
- 00x001dx25519
- 10x0017secp256r1 (P-256)
- 20x0018secp384r1 (P-384)
- 30x0019secp521r1 (P-521)
- 40x001ex448
- 50x0100ffdhe2048
- 60x0101ffdhe3072
- 70x0102ffdhe4096
- 80x0103ffdhe6144
- 90x0104ffdhe8192
- 00x0403ecdsa_secp256r1_sha256
- 10x0503ecdsa_secp384r1_sha384
- 20x0603ecdsa_secp521r1_sha512
- 30x0807ed25519
- 40x0808ed448
- 50x0804rsa_pss_rsae_sha256
- 60x0805rsa_pss_rsae_sha384
- 70x0806rsa_pss_rsae_sha512
- 80x0809rsa_pss_pss_sha256
- 90x080arsa_pss_pss_sha384
- 100x080brsa_pss_pss_sha512
- 110x0401rsa_pkcs1_sha256
- 120x0501rsa_pkcs1_sha384
- 130x0601rsa_pkcs1_sha512
- 140x0402rsa_pkcs1_sha384
- 150x0303rsa_pkcs1_sha512 (legacy)
- 160x0301rsa_pkcs1_sha256 (legacy)
- 170x0302rsa_pkcs1_sha384 (legacy)
- 180x0203ecdsa_sha1
- 190x0201rsa_pkcs1_sha1
- 200x0202unknown (0x0202)
Reach — domains contacted
- 33%
- 33%
- 33%
Top 3 of 3. Share is the fraction of this fingerprint’s observations reaching each name.