t12d9911h2_928422b96a7a_4925de43554f
Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
What this fingerprint encodes
JA4_a
t12d9911h2
handshake shape, human-readable
JA4_b
928422b96a7a
truncated hash of the cipher list
JA4_c
4925de43554f
truncated hash of extensions + signature algorithms
- Transport
- TCP
- TLS version
- TLS 1.2
- Server name
- server name sent
- Cipher suites offered
- 99
- Extensions offered
- 11
- ALPN
- h2
The hello it was computed from
Recovered because the proxy now stores the pre-hash JA3 string alongside the digest. Every number below came out of this client's ClientHello; anything we cannot name in the IANA registry is shown as its raw value rather than guessed at.
- Version
- TLS 1.2
Cipher suites 105
-
52395 (0xccab) -
52396 (0xccac) -
52397 (0xccad) -
52398 (0xccae) -
49178 (0xc01a) -
49179 (0xc01b) -
49180 (0xc01c) -
49181 (0xc01d) -
30 (0x001e) -
49182 (0xc01e) -
31 (0x001f) -
49183 (0xc01f) -
32 (0x0020) -
49184 (0xc020) -
33 (0x0021) -
49185 (0xc021) -
34 (0x0022) -
49186 (0xc022) -
35 (0x0023) -
36 (0x0024) -
37 (0x0025) -
38 (0x0026) -
39 (0x0027) -
40 (0x0028) -
41 (0x0029) -
42 (0x002a) -
43 (0x002b) -
44 (0x002c) -
45 (0x002d) -
46 (0x002e) -
49203 (0xc033) -
49204 (0xc034) -
49205 (0xc035) -
49206 (0xc036) -
49207 (0xc037) -
49208 (0xc038) -
49209 (0xc039) -
49210 (0xc03a) -
49211 (0xc03b) -
49252 (0xc064) -
49253 (0xc065) -
49254 (0xc066) -
49255 (0xc067) -
49256 (0xc068) -
49257 (0xc069) -
49258 (0xc06a) -
49259 (0xc06b) -
49260 (0xc06c) -
49261 (0xc06d) -
49262 (0xc06e) -
49263 (0xc06f) -
49264 (0xc070) -
49265 (0xc071) -
138 (0x008a) -
139 (0x008b) -
140 (0x008c) -
141 (0x008d) -
142 (0x008e) -
49294 (0xc08e) -
143 (0x008f) -
49295 (0xc08f) -
144 (0x0090) -
49296 (0xc090) -
145 (0x0091) -
49297 (0xc091) -
146 (0x0092) -
49298 (0xc092) -
147 (0x0093) -
49299 (0xc093) -
148 (0x0094) -
49300 (0xc094) -
149 (0x0095) -
49301 (0xc095) -
49302 (0xc096) -
49303 (0xc097) -
49304 (0xc098) -
49305 (0xc099) -
49306 (0xc09a) -
49307 (0xc09b) -
49316 (0xc0a4) -
49317 (0xc0a5) -
49318 (0xc0a6) -
49319 (0xc0a7) -
168 (0x00a8) -
49320 (0xc0a8) -
169 (0x00a9) -
49321 (0xc0a9) -
170 (0x00aa) -
49322 (0xc0aa) -
171 (0x00ab) -
49323 (0xc0ab) -
172 (0x00ac) -
173 (0x00ad) -
174 (0x00ae) -
175 (0x00af) -
176 (0x00b0) -
177 (0x00b1) -
178 (0x00b2) -
179 (0x00b3) -
180 (0x00b4) -
181 (0x00b5) -
182 (0x00b6) -
183 (0x00b7) -
184 (0x00b8) -
185 (0x00b9)
Extensions 11
-
renegotiation_info -
signed_certificate_timestamp -
status_request -
server_name -
extended_master_secret -
session_ticket -
signature_algorithms -
ec_point_formats -
supported_groups -
application_layer_protocol_negotiation -
padding
Named groups 5
-
x25519 -
secp256r1 -
x448 -
secp521r1 -
secp384r1
Point formats 3
-
uncompressed -
ansiX962_compressed_prime -
ansiX962_compressed_char2
Raw JA3 string
771,52395-52396-52397-52398-49178-49179-49180-49181-30-49182-31-49183-32-49184-33-49185-34-49186-35-36-37-38-39-40-41-42-43-44-45-46-49203-49204-49205-49206-49207-49208-49209-49210-49211-49252-49253-49254-49255-49256-49257-49258-49259-49260-49261-49262-49263-49264-49265-138-139-140-141-142-49294-143-49295-144-49296-145-49297-146-49298-147-49299-148-49300-149-49301-49302-49303-49304-49305-49306-49307-49316-49317-49318-49319-168-49320-169-49321-170-49322-171-49323-172-173-174-175-176-177-178-179-180-181-182-183-184-185,65281-18-5-0-23-35-13-11-10-16-21,29-23-30-25-24,0-1-2Seen in live traffic
- Connections
- 2
- First seen
- 2026-10-21 01:14 UTC
- Last seen
- 2026-10-21 01:14 UTC
- Transport
- TCP
This entry is an observation, not a policy decision. It is here because the edge saw it, not because anyone reviewed it, and it blocks nothing on its own. Only the curated tier drives classification and banning.