huntback / JARM cluster
29d29d00029d29d00041d41d00041d01a05e5e7e28522d5dc83e0500c983cf
Hosts with this TLS fingerprint
| 169.237.228.52 |
| 20.72.110.19 |
| 52.215.64.251 |
Explore this cluster
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeWhat is JARM?
A shared JARM means these hosts negotiate TLS identically, the same server software or stack. It is a strong pivot lead, not proof of the same operator. Confirm a link with certificates, response bodies, favicon/content hashes, C2 beacon destinations and shared tokens.