huntback / JARM cluster
28d28d28d00000000042d42d000000b9d33adabea3ee39024845e0e70d7ca0
Hosts with this TLS fingerprint
| 128.199.157.145 |
| 13.54.0.10 |
| 50.116.54.138 |
| 52.214.220.236 |
| 8.208.31.235 |
| 8.208.9.159 |
| 8.208.9.176 |
Explore this cluster
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeWhat is JARM?
A shared JARM means these hosts negotiate TLS identically, the same server software or stack. It is a strong pivot lead, not proof of the same operator. Confirm a link with certificates, response bodies, favicon/content hashes, C2 beacon destinations and shared tokens.