t13d110700_61af50b1aabb_13d7658266da
Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
What this fingerprint encodes
t13d110700
handshake shape, human-readable
61af50b1aabb
truncated hash of the cipher list
13d7658266da
truncated hash of extensions + signature algorithms
- Transport
- TCP
- TLS version
- TLS 1.3
- Server name
- server name sent
- Cipher suites offered
- 11
- Extensions offered
- 7
- ALPN
- none offered
Same tool, different options
These 5 other fingerprints share this one's JA4_c — the extension and signature-algorithm hash. A client that keeps its extension set constant while varying its cipher list produces exactly this pattern, which is what a scanner iterating cipher suites looks like. A JA3 cannot show you this: its single MD5 collapses ciphers and extensions together, so every variation looks like an unrelated client.
- t00d120700_dd9017382ddc_13d7658266da
- t13d020700_9d5106e3f751_13d7658266da
- t13d030700_dd90744a70f1_13d7658266da
- t13d100700_dfb617a4bdc8_13d7658266da
- t13d120700_dd9017382ddc_13d7658266da
The hello it was computed from
Recovered because the proxy now stores the pre-hash JA3 string alongside the digest. Every number below came out of this client's ClientHello; anything we cannot name in the IANA registry is shown as its raw value rather than guessed at.
- Version
- TLS 1.2
Cipher suites 11
-
49411 (0xc103) -
49412 (0xc104) -
49413 (0xc105) -
49414 (0xc106) -
TLS_AES_128_GCM_SHA256 -
TLS_CHACHA20_POLY1305_SHA256 -
TLS_AES_128_CCM_SHA256 -
TLS_AES_128_CCM_8_SHA256 -
198 (0x00c6) -
199 (0x00c7) -
TLS_EMPTY_RENEGOTIATION_INFO_SCSV
Extensions 7
-
server_name -
40 (0x0028) -
key_share -
supported_versions -
signature_algorithms_cert -
supported_groups -
signature_algorithms
Named groups 174
-
1 (0x0001) -
2 (0x0002) -
3 (0x0003) -
4 (0x0004) -
5 (0x0005) -
6 (0x0006) -
7 (0x0007) -
8 (0x0008) -
9 (0x0009) -
10 (0x000a) -
11 (0x000b) -
12 (0x000c) -
13 (0x000d) -
14 (0x000e) -
15 (0x000f) -
16 (0x0010) -
17 (0x0011) -
18 (0x0012) -
19 (0x0013) -
20 (0x0014) -
21 (0x0015) -
22 (0x0016) -
secp256r1 -
secp384r1 -
secp521r1 -
26 (0x001a) -
27 (0x001b) -
28 (0x001c) -
x25519 -
x448 -
34 (0x0022) -
35 (0x0023) -
36 (0x0024) -
37 (0x0025) -
38 (0x0026) -
39 (0x0027) -
40 (0x0028) -
41 (0x0029) -
ffdhe2048 -
ffdhe3072 -
ffdhe4096 -
259 (0x0103) -
260 (0x0104) -
SecP384r1MLKEM1024 -
513 (0x0201) -
514 (0x0202) -
515 (0x0203) -
516 (0x0204) -
517 (0x0205) -
518 (0x0206) -
519 (0x0207) -
527 (0x020f) -
528 (0x0210) -
529 (0x0211) -
547 (0x0223) -
548 (0x0224) -
553 (0x0229) -
554 (0x022a) -
555 (0x022b) -
556 (0x022c) -
557 (0x022d) -
558 (0x022e) -
568 (0x0238) -
570 (0x023a) -
571 (0x023b) -
572 (0x023c) -
573 (0x023d) -
574 (0x023e) -
575 (0x023f) -
576 (0x0240) -
577 (0x0241) -
578 (0x0242) -
579 (0x0243) -
580 (0x0244) -
581 (0x0245) -
582 (0x0246) -
X25519MLKEM768 -
SecP256r1MLKEM768 -
4589 (0x11ed) -
12032 (0x2f00) -
12033 (0x2f01) -
12034 (0x2f02) -
12035 (0x2f03) -
12036 (0x2f04) -
12037 (0x2f05) -
12038 (0x2f06) -
12039 (0x2f07) -
12047 (0x2f0f) -
12048 (0x2f10) -
12049 (0x2f11) -
12067 (0x2f23) -
12068 (0x2f24) -
12070 (0x2f26) -
12072 (0x2f28) -
12073 (0x2f29) -
12074 (0x2f2a) -
12075 (0x2f2b) -
12076 (0x2f2c) -
12077 (0x2f2d) -
12078 (0x2f2e) -
12087 (0x2f37) -
12088 (0x2f38) -
12089 (0x2f39) -
12090 (0x2f3a) -
12091 (0x2f3b) -
12092 (0x2f3c) -
12093 (0x2f3d) -
12094 (0x2f3e) -
12095 (0x2f3f) -
12096 (0x2f40) -
12097 (0x2f41) -
12098 (0x2f42) -
12099 (0x2f43) -
12100 (0x2f44) -
12101 (0x2f45) -
12102 (0x2f46) -
12107 (0x2f4b) -
12108 (0x2f4c) -
12109 (0x2f4d) -
12110 (0x2f4e) -
12160 (0x2f80) -
12161 (0x2f81) -
12162 (0x2f82) -
12163 (0x2f83) -
12176 (0x2f90) -
12201 (0x2fa9) -
12202 (0x2faa) -
12204 (0x2fac) -
12205 (0x2fad) -
12206 (0x2fae) -
12207 (0x2faf) -
12208 (0x2fb0) -
12209 (0x2fb1) -
12214 (0x2fb6) -
12215 (0x2fb7) -
16696 (0x4138) -
X25519Kyber768Draft00 -
25498 (0x639a) -
65024 (0xfe00) -
65025 (0xfe01) -
65026 (0xfe02) -
65027 (0xfe03) -
65028 (0xfe04) -
65029 (0xfe05) -
65030 (0xfe06) -
65031 (0xfe07) -
65032 (0xfe08) -
65033 (0xfe09) -
65034 (0xfe0a) -
65035 (0xfe0b) -
65036 (0xfe0c) -
65037 (0xfe0d) -
65038 (0xfe0e) -
65039 (0xfe0f) -
65043 (0xfe13) -
65044 (0xfe14) -
65045 (0xfe15) -
65046 (0xfe16) -
65047 (0xfe17) -
65048 (0xfe18) -
65049 (0xfe19) -
65050 (0xfe1a) -
65051 (0xfe1b) -
65052 (0xfe1c) -
65053 (0xfe1d) -
65054 (0xfe1e) -
65055 (0xfe1f) -
65056 (0xfe20) -
65057 (0xfe21) -
65058 (0xfe22) -
65072 (0xfe30) -
65073 (0xfe31) -
65281 (0xff01) -
65282 (0xff02)
Raw JA3 string
771,49411-49412-49413-49414-4865-4867-4868-4869-198-199-255,0-40-51-43-50-10-13,1-2-3-4-5-6-7-8-9-10-11-12-13-14-15-16-17-18-19-20-21-22-23-24-25-26-27-28-29-30-34-35-36-37-38-39-40-41-256-257-258-259-260-512-513-514-515-516-517-518-519-527-528-529-547-548-553-554-555-556-557-558-568-570-571-572-573-574-575-576-577-578-579-580-581-582-4587-4588-4589-12032-12033-12034-12035-12036-12037-12038-12039-12047-12048-12049-12067-12068-12070-12072-12073-12074-12075-12076-12077-12078-12087-12088-12089-12090-12091-12092-12093-12094-12095-12096-12097-12098-12099-12100-12101-12102-12107-12108-12109-12110-12160-12161-12162-12163-12176-12201-12202-12204-12205-12206-12207-12208-12209-12214-12215-16696-25497-25498-65024-65025-65026-65027-65028-65029-65030-65031-65032-65033-65034-65035-65036-65037-65038-65039-65043-65044-65045-65046-65047-65048-65049-65050-65051-65052-65053-65054-65055-65056-65057-65058-65072-65073-65281-65282,Seen in live traffic
- Connections
- 1
- First seen
- 2026-10-20 22:31 UTC
- Last seen
- 2026-10-20 22:31 UTC
- Transport
- TCP
This entry is an observation, not a policy decision. It is here because the edge saw it, not because anyone reviewed it, and it blocks nothing on its own. Only the curated tier drives classification and banning.