huntback / JARM cluster

28d28d28d00028d00042d42d0000001b0c486b0c0bae33c7ce67177fe8bab5

80 host(s)

Hosts with this TLS fingerprint

100.23.241.57
107.20.108.150
107.22.37.196
13.210.21.205
13.216.20.158
13.219.149.218
13.228.6.242
13.229.165.97
13.234.5.106
13.237.123.146
13.36.211.30
13.39.126.143
13.41.115.120
13.43.187.181
15.222.203.250
15.237.222.175
16.58.103.175
16.61.255.59
18.130.179.73
18.133.49.252
18.136.131.181
18.206.30.147
18.208.52.172
18.219.102.117
18.220.113.40
20.157.117.15
3.110.204.71
3.124.116.170
3.127.33.110
3.133.176.161
3.149.30.54
3.208.102.162
3.22.195.28
3.227.162.7
3.237.238.200
3.27.96.58
3.77.87.227
3.90.160.66
34.100.137.142
34.195.190.13
34.205.162.13
34.236.64.23
34.247.109.229
35.154.115.31
35.162.250.24
35.171.238.57
35.173.166.200
35.178.3.127
35.178.88.116
41.111.178.165
43.204.83.241
44.197.2.238
44.201.77.161
44.206.214.214
44.207.179.148
44.215.235.216
44.219.54.135
44.226.238.99
44.242.223.198
44.246.210.76
47.130.141.122
50.19.34.223
51.21.149.14
52.0.116.115
52.13.246.96
52.220.207.238
52.34.224.1
52.55.9.7
52.65.112.184
52.65.40.48
52.77.28.192
52.87.68.61
54.158.249.74
54.195.253.91
54.235.9.30
54.238.49.75
63.176.7.3
63.33.155.220
98.94.186.206
99.79.156.95

Explore this cluster

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

What is JARM?

A shared JARM means these hosts negotiate TLS identically, the same server software or stack. It is a strong pivot lead, not proof of the same operator. Confirm a link with certificates, response bodies, favicon/content hashes, C2 beacon destinations and shared tokens.