t11d990300_523035705075_33a13ba74d1c
Legacy TLS client — inferred from the JA4 handshake shape.
What this fingerprint encodes
JA4_a
t11d990300
handshake shape, human-readable
JA4_b
523035705075
truncated hash of the cipher list
JA4_c
33a13ba74d1c
truncated hash of extensions + signature algorithms
- Transport
- TCP
- TLS version
- TLS 1.1
- Server name
- server name sent
- Cipher suites offered
- 99
- Extensions offered
- 3
- ALPN
- none offered
Same tool, different options
These 48 other fingerprints share this one's JA4_c — the extension and signature-algorithm hash. A client that keeps its extension set constant while varying its cipher list produces exactly this pattern, which is what a scanner iterating cipher suites looks like. A JA3 cannot show you this: its single MD5 collapses ciphers and extensions together, so every variation looks like an unrelated client.
- t10d040300_058957366436_33a13ba74d1c
- t10d130300_48b83dc3bfb9_33a13ba74d1c
- t10d170300_bee8bfcd7714_33a13ba74d1c
- t10d420300_4a5d165148b5_33a13ba74d1c
- t10d620300_89149463b124_33a13ba74d1c
- t10d640300_13a2a23d501b_33a13ba74d1c
- t10d640300_1715b94e3896_33a13ba74d1c
- t10d640300_1e98fdfb27e9_33a13ba74d1c
- t10d640300_67f0ca237a44_33a13ba74d1c
- t10d640300_a3acda31d846_33a13ba74d1c
- t10d640300_e31a90cd0803_33a13ba74d1c
- t10d640300_e7b476f9520b_33a13ba74d1c
- t10d640300_f559eb9565fd_33a13ba74d1c
- t10d990300_523035705075_33a13ba74d1c
- t10d990300_896f75462ccc_33a13ba74d1c
- t10i040200_058957366436_33a13ba74d1c
- t10i640200_13a2a23d501b_33a13ba74d1c
- t10i640200_1715b94e3896_33a13ba74d1c
- t10i640200_1e98fdfb27e9_33a13ba74d1c
- t10i640200_67f0ca237a44_33a13ba74d1c
- t10i640200_a3acda31d846_33a13ba74d1c
- t10i640200_e31a90cd0803_33a13ba74d1c
- t10i640200_e7b476f9520b_33a13ba74d1c
- t10i640200_f559eb9565fd_33a13ba74d1c
- t11d040300_058957366436_33a13ba74d1c
- t11d130300_48b83dc3bfb9_33a13ba74d1c
- t11d170300_bee8bfcd7714_33a13ba74d1c
- t11d420300_4a5d165148b5_33a13ba74d1c
- t11d620300_89149463b124_33a13ba74d1c
- t11d640300_13a2a23d501b_33a13ba74d1c
- t11d640300_1715b94e3896_33a13ba74d1c
- t11d640300_1e98fdfb27e9_33a13ba74d1c
- t11d640300_67f0ca237a44_33a13ba74d1c
- t11d640300_a3acda31d846_33a13ba74d1c
- t11d640300_e31a90cd0803_33a13ba74d1c
- t11d640300_e7b476f9520b_33a13ba74d1c
- t11d640300_f559eb9565fd_33a13ba74d1c
- t11d990300_896f75462ccc_33a13ba74d1c
- t11i040200_058957366436_33a13ba74d1c
- t11i640200_13a2a23d501b_33a13ba74d1c
- t11i640200_1715b94e3896_33a13ba74d1c
- t11i640200_1e98fdfb27e9_33a13ba74d1c
- t11i640200_67f0ca237a44_33a13ba74d1c
- t11i640200_a3acda31d846_33a13ba74d1c
- t11i640200_e31a90cd0803_33a13ba74d1c
- t11i640200_e7b476f9520b_33a13ba74d1c
- t11i640200_f559eb9565fd_33a13ba74d1c
- t12d990300_896f75462ccc_33a13ba74d1c
The hello it was computed from
Recovered because the proxy now stores the pre-hash JA3 string alongside the digest. Every number below came out of this client's ClientHello; anything we cannot name in the IANA registry is shown as its raw value rather than guessed at.
- Version
- TLS 1.1
Cipher suites 154
-
1 (0x0001) -
2 (0x0002) -
3 (0x0003) -
TLS_RSA_WITH_RC4_128_MD5 -
TLS_RSA_WITH_RC4_128_SHA -
6 (0x0006) -
7 (0x0007) -
8 (0x0008) -
9 (0x0009) -
TLS_RSA_WITH_3DES_EDE_CBC_SHA -
14 (0x000e) -
15 (0x000f) -
16 (0x0010) -
20 (0x0014) -
21 (0x0015) -
TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA -
TLS_RSA_WITH_AES_128_CBC_SHA -
49 (0x0031) -
TLS_DHE_RSA_WITH_AES_128_CBC_SHA -
TLS_RSA_WITH_AES_256_CBC_SHA -
55 (0x0037) -
TLS_DHE_RSA_WITH_AES_256_CBC_SHA -
59 (0x003b) -
TLS_RSA_WITH_AES_128_CBC_SHA256 -
TLS_RSA_WITH_AES_256_CBC_SHA256 -
63 (0x003f) -
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA -
67 (0x0043) -
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA -
96 (0x0060) -
97 (0x0061) -
98 (0x0062) -
100 (0x0064) -
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 -
105 (0x0069) -
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 -
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA -
134 (0x0086) -
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA -
TLS_RSA_WITH_SEED_CBC_SHA -
152 (0x0098) -
TLS_DHE_RSA_WITH_SEED_CBC_SHA -
TLS_RSA_WITH_AES_128_GCM_SHA256 -
TLS_RSA_WITH_AES_256_GCM_SHA384 -
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 -
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 -
160 (0x00a0) -
161 (0x00a1) -
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 -
188 (0x00bc) -
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 -
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 -
194 (0x00c2) -
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 -
5815 (0x16b7) -
5817 (0x16b9) -
49163 (0xc00b) -
49164 (0xc00c) -
49165 (0xc00d) -
49166 (0xc00e) -
49167 (0xc00f) -
49168 (0xc010) -
TLS_ECDHE_RSA_WITH_RC4_128_SHA -
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA -
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA -
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA -
49179 (0xc01b) -
49182 (0xc01e) -
49185 (0xc021) -
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 -
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 -
49193 (0xc029) -
49194 (0xc02a) -
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 -
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 -
49201 (0xc031) -
49202 (0xc032) -
49212 (0xc03c) -
49213 (0xc03d) -
49216 (0xc040) -
49217 (0xc041) -
49220 (0xc044) -
49221 (0xc045) -
49228 (0xc04c) -
49229 (0xc04d) -
49230 (0xc04e) -
49231 (0xc04f) -
49232 (0xc050) -
49233 (0xc051) -
49234 (0xc052) -
49235 (0xc053) -
49236 (0xc054) -
49237 (0xc055) -
TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 -
TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 -
49250 (0xc062) -
49251 (0xc063) -
TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256 -
TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384 -
49272 (0xc078) -
49273 (0xc079) -
49274 (0xc07a) -
49275 (0xc07b) -
49276 (0xc07c) -
49277 (0xc07d) -
49278 (0xc07e) -
49279 (0xc07f) -
49290 (0xc08a) -
49291 (0xc08b) -
49292 (0xc08c) -
49293 (0xc08d) -
TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256 -
TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384 -
TLS_RSA_WITH_ARIA_128_GCM_SHA256 -
TLS_RSA_WITH_ARIA_256_GCM_SHA384 -
TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256 -
TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384 -
TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 -
TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 -
49411 (0xc103) -
49412 (0xc104) -
49413 (0xc105) -
49414 (0xc106) -
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (draft) -
TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (draft) -
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 -
TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 -
TLS_AES_128_GCM_SHA256 -
TLS_AES_256_GCM_SHA384 -
TLS_CHACHA20_POLY1305_SHA256 -
TLS_AES_128_CCM_SHA256 -
TLS_AES_128_CCM_8_SHA256 -
58384 (0xe410) -
58385 (0xe411) -
58386 (0xe412) -
58387 (0xe413) -
58398 (0xe41e) -
58399 (0xe41f) -
65278 (0xfefe) -
65279 (0xfeff) -
65408 (0xff80) -
65409 (0xff81) -
65410 (0xff82) -
65411 (0xff83) -
65504 (0xffe0) -
65505 (0xffe1) -
198 (0x00c6) -
199 (0x00c7) -
57369 (0xe019) -
57370 (0xe01a) -
57372 (0xe01c) -
57433 (0xe059) -
57434 (0xe05a) -
TLS_EMPTY_RENEGOTIATION_INFO_SCSV
Extensions 3
-
server_name -
supported_groups -
ec_point_formats
Named groups 37
-
1 (0x0001) -
2 (0x0002) -
3 (0x0003) -
4 (0x0004) -
5 (0x0005) -
6 (0x0006) -
7 (0x0007) -
8 (0x0008) -
9 (0x0009) -
10 (0x000a) -
11 (0x000b) -
12 (0x000c) -
13 (0x000d) -
14 (0x000e) -
15 (0x000f) -
16 (0x0010) -
17 (0x0011) -
18 (0x0012) -
19 (0x0013) -
20 (0x0014) -
21 (0x0015) -
22 (0x0016) -
secp256r1 -
secp384r1 -
secp521r1 -
26 (0x001a) -
27 (0x001b) -
28 (0x001c) -
x25519 -
x448 -
ffdhe2048 -
ffdhe3072 -
ffdhe4096 -
259 (0x0103) -
260 (0x0104) -
65281 (0xff01) -
65282 (0xff02)
Point formats 3
-
uncompressed -
ansiX962_compressed_prime -
ansiX962_compressed_char2
Raw JA3 string
770,1-2-3-4-5-6-7-8-9-10-14-15-16-20-21-22-47-49-51-53-55-57-59-60-61-63-65-67-69-96-97-98-100-103-105-107-132-134-136-150-152-154-156-157-158-159-160-161-186-188-190-192-194-196-5815-5817-49163-49164-49165-49166-49167-49168-49169-49170-49171-49172-49179-49182-49185-49191-49192-49193-49194-49199-49200-49201-49202-49212-49213-49216-49217-49220-49221-49228-49229-49230-49231-49232-49233-49234-49235-49236-49237-49248-49249-49250-49251-49270-49271-49272-49273-49274-49275-49276-49277-49278-49279-49290-49291-49292-49293-49308-49309-49310-49311-49312-49313-49314-49315-49411-49412-49413-49414-52243-52245-52392-52394-4865-4866-4867-4868-4869-58384-58385-58386-58387-58398-58399-65278-65279-65408-65409-65410-65411-65504-65505-198-199-57369-57370-57372-57433-57434-255,0-10-11,1-2-3-4-5-6-7-8-9-10-11-12-13-14-15-16-17-18-19-20-21-22-23-24-25-26-27-28-29-30-256-257-258-259-260-65281-65282,0-1-2Seen in live traffic
- Connections
- 1
- First seen
- 2026-10-20 22:31 UTC
- Last seen
- 2026-10-20 22:31 UTC
- Transport
- TCP
This entry is an observation, not a policy decision. It is here because the edge saw it, not because anyone reviewed it, and it blocks nothing on its own. Only the curated tier drives classification and banning.