huntback / JARM cluster

21d3fd00021d21d00021d3fd21d21d54e66ba0903a54b8e2603ca58f0caaed

16 host(s)

Hosts with this TLS fingerprint

1.214.157.203
1.214.157.205
112.163.28.123
112.166.33.242
115.21.224.117
14.35.5.5
14.39.43.121
14.49.180.212
183.97.175.181
220.123.29.76
220.79.229.219
222.108.0.231
49.175.72.181
59.25.246.161
59.6.203.38
92.97.119.138

Explore this cluster

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

What is JARM?

A shared JARM means these hosts negotiate TLS identically, the same server software or stack. It is a strong pivot lead, not proof of the same operator. Confirm a link with certificates, response bodies, favicon/content hashes, C2 beacon destinations and shared tokens.