alert tls any any -> any any (msg:"🐾 - ℹ OpenRDAP request observed"; flow:to_server, stateless; ja3.hash; content:"473cd7cb9faa642487833865d516e578"; fast_pattern; tls.sni; content:"rdap."; startswith; metadata:former_category JA3; reference:url,https://openrdap.org/; metadata:created_at 2025_02_25, updated_at 2025_02_25; sid:3321416; rev:2; classtype:misc-activity;)