t11d990300_896f75462ccc_33a13ba74d1c
Legacy TLS client — inferred from the JA4 handshake shape.
What this fingerprint encodes
JA4_a
t11d990300
handshake shape, human-readable
JA4_b
896f75462ccc
truncated hash of the cipher list
JA4_c
33a13ba74d1c
truncated hash of extensions + signature algorithms
- Transport
- TCP
- TLS version
- TLS 1.1
- Server name
- server name sent
- Cipher suites offered
- 99
- Extensions offered
- 3
- ALPN
- none offered
Same tool, different options
These 48 other fingerprints share this one's JA4_c — the extension and signature-algorithm hash. A client that keeps its extension set constant while varying its cipher list produces exactly this pattern, which is what a scanner iterating cipher suites looks like. A JA3 cannot show you this: its single MD5 collapses ciphers and extensions together, so every variation looks like an unrelated client.
- t10d040300_058957366436_33a13ba74d1c
- t10d130300_48b83dc3bfb9_33a13ba74d1c
- t10d170300_bee8bfcd7714_33a13ba74d1c
- t10d420300_4a5d165148b5_33a13ba74d1c
- t10d620300_89149463b124_33a13ba74d1c
- t10d640300_13a2a23d501b_33a13ba74d1c
- t10d640300_1715b94e3896_33a13ba74d1c
- t10d640300_1e98fdfb27e9_33a13ba74d1c
- t10d640300_67f0ca237a44_33a13ba74d1c
- t10d640300_a3acda31d846_33a13ba74d1c
- t10d640300_e31a90cd0803_33a13ba74d1c
- t10d640300_e7b476f9520b_33a13ba74d1c
- t10d640300_f559eb9565fd_33a13ba74d1c
- t10d990300_523035705075_33a13ba74d1c
- t10d990300_896f75462ccc_33a13ba74d1c
- t10i040200_058957366436_33a13ba74d1c
- t10i640200_13a2a23d501b_33a13ba74d1c
- t10i640200_1715b94e3896_33a13ba74d1c
- t10i640200_1e98fdfb27e9_33a13ba74d1c
- t10i640200_67f0ca237a44_33a13ba74d1c
- t10i640200_a3acda31d846_33a13ba74d1c
- t10i640200_e31a90cd0803_33a13ba74d1c
- t10i640200_e7b476f9520b_33a13ba74d1c
- t10i640200_f559eb9565fd_33a13ba74d1c
- t11d040300_058957366436_33a13ba74d1c
- t11d130300_48b83dc3bfb9_33a13ba74d1c
- t11d170300_bee8bfcd7714_33a13ba74d1c
- t11d420300_4a5d165148b5_33a13ba74d1c
- t11d620300_89149463b124_33a13ba74d1c
- t11d640300_13a2a23d501b_33a13ba74d1c
- t11d640300_1715b94e3896_33a13ba74d1c
- t11d640300_1e98fdfb27e9_33a13ba74d1c
- t11d640300_67f0ca237a44_33a13ba74d1c
- t11d640300_a3acda31d846_33a13ba74d1c
- t11d640300_e31a90cd0803_33a13ba74d1c
- t11d640300_e7b476f9520b_33a13ba74d1c
- t11d640300_f559eb9565fd_33a13ba74d1c
- t11d990300_523035705075_33a13ba74d1c
- t11i040200_058957366436_33a13ba74d1c
- t11i640200_13a2a23d501b_33a13ba74d1c
- t11i640200_1715b94e3896_33a13ba74d1c
- t11i640200_1e98fdfb27e9_33a13ba74d1c
- t11i640200_67f0ca237a44_33a13ba74d1c
- t11i640200_a3acda31d846_33a13ba74d1c
- t11i640200_e31a90cd0803_33a13ba74d1c
- t11i640200_e7b476f9520b_33a13ba74d1c
- t11i640200_f559eb9565fd_33a13ba74d1c
- t12d990300_896f75462ccc_33a13ba74d1c
The hello it was computed from
Recovered because the proxy now stores the pre-hash JA3 string alongside the digest. Every number below came out of this client's ClientHello; anything we cannot name in the IANA registry is shown as its raw value rather than guessed at.
- Version
- TLS 1.1
Cipher suites 186
-
0 (0x0000) -
11 (0x000b) -
12 (0x000c) -
13 (0x000d) -
17 (0x0011) -
18 (0x0012) -
19 (0x0013) -
23 (0x0017) -
24 (0x0018) -
25 (0x0019) -
26 (0x001a) -
27 (0x001b) -
30 (0x001e) -
31 (0x001f) -
32 (0x0020) -
33 (0x0021) -
34 (0x0022) -
35 (0x0023) -
36 (0x0024) -
37 (0x0025) -
38 (0x0026) -
39 (0x0027) -
40 (0x0028) -
41 (0x0029) -
42 (0x002a) -
43 (0x002b) -
44 (0x002c) -
45 (0x002d) -
46 (0x002e) -
48 (0x0030) -
50 (0x0032) -
52 (0x0034) -
54 (0x0036) -
56 (0x0038) -
58 (0x003a) -
62 (0x003e) -
64 (0x0040) -
66 (0x0042) -
68 (0x0044) -
70 (0x0046) -
99 (0x0063) -
101 (0x0065) -
102 (0x0066) -
104 (0x0068) -
106 (0x006a) -
108 (0x006c) -
109 (0x006d) -
133 (0x0085) -
135 (0x0087) -
137 (0x0089) -
138 (0x008a) -
139 (0x008b) -
140 (0x008c) -
141 (0x008d) -
142 (0x008e) -
143 (0x008f) -
144 (0x0090) -
145 (0x0091) -
146 (0x0092) -
147 (0x0093) -
148 (0x0094) -
149 (0x0095) -
151 (0x0097) -
153 (0x0099) -
155 (0x009b) -
162 (0x00a2) -
163 (0x00a3) -
164 (0x00a4) -
165 (0x00a5) -
166 (0x00a6) -
167 (0x00a7) -
168 (0x00a8) -
169 (0x00a9) -
170 (0x00aa) -
171 (0x00ab) -
172 (0x00ac) -
173 (0x00ad) -
174 (0x00ae) -
175 (0x00af) -
176 (0x00b0) -
177 (0x00b1) -
178 (0x00b2) -
179 (0x00b3) -
180 (0x00b4) -
181 (0x00b5) -
182 (0x00b6) -
183 (0x00b7) -
184 (0x00b8) -
185 (0x00b9) -
187 (0x00bb) -
189 (0x00bd) -
191 (0x00bf) -
193 (0x00c1) -
195 (0x00c3) -
197 (0x00c5) -
49173 (0xc015) -
49174 (0xc016) -
49175 (0xc017) -
49176 (0xc018) -
49177 (0xc019) -
49178 (0xc01a) -
49180 (0xc01c) -
49181 (0xc01d) -
49183 (0xc01f) -
49184 (0xc020) -
49186 (0xc022) -
49203 (0xc033) -
49204 (0xc034) -
49205 (0xc035) -
49206 (0xc036) -
49207 (0xc037) -
49208 (0xc038) -
49209 (0xc039) -
49210 (0xc03a) -
49211 (0xc03b) -
49214 (0xc03e) -
49215 (0xc03f) -
49218 (0xc042) -
49219 (0xc043) -
49222 (0xc046) -
49223 (0xc047) -
49238 (0xc056) -
49239 (0xc057) -
49240 (0xc058) -
49241 (0xc059) -
49242 (0xc05a) -
49243 (0xc05b) -
49252 (0xc064) -
49253 (0xc065) -
49254 (0xc066) -
49255 (0xc067) -
49256 (0xc068) -
49257 (0xc069) -
49258 (0xc06a) -
49259 (0xc06b) -
49260 (0xc06c) -
49261 (0xc06d) -
49262 (0xc06e) -
49263 (0xc06f) -
49264 (0xc070) -
49265 (0xc071) -
49280 (0xc080) -
49281 (0xc081) -
49282 (0xc082) -
49283 (0xc083) -
49284 (0xc084) -
49285 (0xc085) -
49294 (0xc08e) -
49295 (0xc08f) -
49296 (0xc090) -
49297 (0xc091) -
49298 (0xc092) -
49299 (0xc093) -
49300 (0xc094) -
49301 (0xc095) -
49302 (0xc096) -
49303 (0xc097) -
49304 (0xc098) -
49305 (0xc099) -
49306 (0xc09a) -
49307 (0xc09b) -
49316 (0xc0a4) -
49317 (0xc0a5) -
49318 (0xc0a6) -
49319 (0xc0a7) -
49320 (0xc0a8) -
49321 (0xc0a9) -
49322 (0xc0aa) -
49323 (0xc0ab) -
52395 (0xccab) -
52396 (0xccac) -
52397 (0xccad) -
52398 (0xccae) -
53249 (0xd001) -
53250 (0xd002) -
53251 (0xd003) -
53253 (0xd005) -
58390 (0xe416) -
58391 (0xe417) -
58392 (0xe418) -
58393 (0xe419) -
58394 (0xe41a) -
58395 (0xe41b) -
58396 (0xe41c) -
58397 (0xe41d) -
TLS_EMPTY_RENEGOTIATION_INFO_SCSV
Extensions 3
-
server_name -
supported_groups -
ec_point_formats
Named groups 37
-
1 (0x0001) -
2 (0x0002) -
3 (0x0003) -
4 (0x0004) -
5 (0x0005) -
6 (0x0006) -
7 (0x0007) -
8 (0x0008) -
9 (0x0009) -
10 (0x000a) -
11 (0x000b) -
12 (0x000c) -
13 (0x000d) -
14 (0x000e) -
15 (0x000f) -
16 (0x0010) -
17 (0x0011) -
18 (0x0012) -
19 (0x0013) -
20 (0x0014) -
21 (0x0015) -
22 (0x0016) -
secp256r1 -
secp384r1 -
secp521r1 -
26 (0x001a) -
27 (0x001b) -
28 (0x001c) -
x25519 -
x448 -
ffdhe2048 -
ffdhe3072 -
ffdhe4096 -
259 (0x0103) -
260 (0x0104) -
65281 (0xff01) -
65282 (0xff02)
Point formats 3
-
uncompressed -
ansiX962_compressed_prime -
ansiX962_compressed_char2
Raw JA3 string
770,0-11-12-13-17-18-19-23-24-25-26-27-30-31-32-33-34-35-36-37-38-39-40-41-42-43-44-45-46-48-50-52-54-56-58-62-64-66-68-70-99-101-102-104-106-108-109-133-135-137-138-139-140-141-142-143-144-145-146-147-148-149-151-153-155-162-163-164-165-166-167-168-169-170-171-172-173-174-175-176-177-178-179-180-181-182-183-184-185-187-189-191-193-195-197-49173-49174-49175-49176-49177-49178-49180-49181-49183-49184-49186-49203-49204-49205-49206-49207-49208-49209-49210-49211-49214-49215-49218-49219-49222-49223-49238-49239-49240-49241-49242-49243-49252-49253-49254-49255-49256-49257-49258-49259-49260-49261-49262-49263-49264-49265-49280-49281-49282-49283-49284-49285-49294-49295-49296-49297-49298-49299-49300-49301-49302-49303-49304-49305-49306-49307-49316-49317-49318-49319-49320-49321-49322-49323-52395-52396-52397-52398-53249-53250-53251-53253-58390-58391-58392-58393-58394-58395-58396-58397-255,0-10-11,1-2-3-4-5-6-7-8-9-10-11-12-13-14-15-16-17-18-19-20-21-22-23-24-25-26-27-28-29-30-256-257-258-259-260-65281-65282,0-1-2Seen in live traffic
- Connections
- 1
- First seen
- 2026-10-20 22:31 UTC
- Last seen
- 2026-10-20 22:31 UTC
- Transport
- TCP
This entry is an observation, not a policy decision. It is here because the edge saw it, not because anyone reviewed it, and it blocks nothing on its own. Only the curated tier drives classification and banning.