huntback / JARM cluster
2ad2ad16d2ad2ad22c2ad2ad2ad2adf3837a1f4e11fe9a3f4f59ab18f752b4
Hosts with this TLS fingerprint
| 138.197.83.188 |
| 185.224.133.81 |
| 27.74.252.120 |
Explore this cluster
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeWhat is JARM?
A shared JARM means these hosts negotiate TLS identically, the same server software or stack. It is a strong pivot lead, not proof of the same operator. Confirm a link with certificates, response bodies, favicon/content hashes, C2 beacon destinations and shared tokens.