t12d640400_e7b476f9520b_3549fbaf615c
nmap ssl-enum-ciphers, JA4 (stable across runs; observed 2026-07-31)
What this fingerprint encodes
JA4_a
t12d640400
handshake shape, human-readable
JA4_b
e7b476f9520b
truncated hash of the cipher list
JA4_c
3549fbaf615c
truncated hash of extensions + signature algorithms
- Transport
- TCP
- TLS version
- TLS 1.2
- Server name
- server name sent
- Cipher suites offered
- 64
- Extensions offered
- 4
- ALPN
- none offered
Same tool, different options
These 12 other fingerprints share this one's JA4_c — the extension and signature-algorithm hash. A client that keeps its extension set constant while varying its cipher list produces exactly this pattern, which is what a scanner iterating cipher suites looks like. A JA3 cannot show you this: its single MD5 collapses ciphers and extensions together, so every variation looks like an unrelated client.
- t12d640400_13a2a23d501b_3549fbaf615c
- t12d640400_67f0ca237a44_3549fbaf615c
- t12d640400_a3acda31d846_3549fbaf615c
- t12d640400_e31a90cd0803_3549fbaf615c
- t12d640400_f559eb9565fd_3549fbaf615c
- t12d060400_272d6f91cd02_3549fbaf615c
- t12d630400_305e7cc661dc_3549fbaf615c
- t12d630400_4607ee80f03a_3549fbaf615c
- t12d630400_6ea97102b799_3549fbaf615c
- t12d630400_a819cc8c6927_3549fbaf615c
- t12d630400_c47ce3b2bf1f_3549fbaf615c
- t12d630400_f4a33ce78bd4_3549fbaf615c