PQ CRYPTA PLATFORM

🏠 Main

🏠 Home
⏰ Q-Day Countdown
3
Y
102
D
17
H
40
M
23
S
946
MS

🧪 Interactive Apps

🪞 Handshake Mirror 🫆 JA4 Directory 📋 CBOM Validator 🔐 Encrypt & Share 🔒 Encryption 🗜️ Compression 📄 PDF Tools 🔐 Challenge Mode 🔍 Regex Designer 🔬 PQC Scanner ⚡ HTTP/3 Analyzer 🚀 WebTransport Test 🌐 Speed Test 📡 Telemetry Wall 🎲 Entropy

📰 News

📰 News
🗞️ Latest Headlines
Loading news...
Loading... • Just now

🛡️ PQ Crypta Proxy

🌐 Proxy Whitepaper 🖥️ Control Plane 🐙 GitHub 🎯 Red Team Tests

👤 Account

📝 Sign Up 🔑 Login 📊 Dashboard 🩺 Health Monitor 📡 System Telemetry 🚪 Logout

⟨ QUANTUM ERROR PORTAL ⟩

Navigate the Error Dimensions

PQ Crypta Logo

JA4 Fingerprint Directory

What this edge classifies traffic against, plus what it actually sees — decoded and named, not just listed

3649 fingerprints
179 curated
3470 seen live
1954 browsers
185 API clients
586 scanners

Showing all 3649 fingerprints. Page 28 of 37. JSON

Fingerprint Type Tier Class Identified as
t13i151300_8daaf6152771_556db6a3b758 JA4 seen live1× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i151300_8daaf6152771_b93ce70e6b67 JA4 seen live1× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i1513h2_8daaf6152771_20058ac78caa JA4 seen live1× Scanner Headless Chrome — inferred from the User-Agent on its requests.
t13i151400_8daaf6152771_12517a9a6ccc JA4 seen live1× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i151500_8daaf6152771_33f857a189cb JA4 seen live1× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i170900_5b57614c22b0_78e6aca7449b JA4 seen live46× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i171100_ab0a1bf427ad_ecd0401ec68b JA4 seen live4× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i180900_85036bcba153_1f22a2ca17c4 JA4 seen live7× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i190500_9c2f387b437f_05020bd715f8 JA4 seen live3× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i190800_9dc949149365_97f8aa674fd9 JA4 seen live723× Scanner Censys — inferred from the User-Agent on its requests. UA conflict
t13i191100_9dc949149365_9249cab70c77 JA4 seen live2× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i220900_231e334592e8_29829a46703f JA4 seen live4× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i260800_3309cf098094_97f8aa674fd9 JA4 seen live7× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i270800_fa4239e4ca25_97f8aa674fd9 JA4 seen live1× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i300900_3c43a67630b3_e7c285222651 JA4 seen live98× Scanner Internet Measurement — inferred from the User-Agent on its requests.
t13i301100_1d37bd780c83_ecd0401ec68b JA4 seen live4× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i310900_e8f1e7e78f70_1f22a2ca17c4 JA4 seen live6× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i310900_e8f1e7e78f70_5ac7197df9d2 JA4 seen live14× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i311100_1d947a95fc68_7e1102d2036b JA4 seen live3× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i311100_e8f1e7e78f70_0d7ed806c34c JA4 seen live1× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i360900_bcee18a5b459_3550537cd59b JA4 seen live1× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i491100_bd868743f55c_7c76daad20ec JA4 seen live10× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i681000_13e0e9e1c501_8e6e362c5eac JA4 seen live1026× Scanner nmap — inferred from the User-Agent on its requests.
t13i711100_8f28d1f76561_ecd0401ec68b JA4 seen live47× Scanner nmap — inferred from the User-Agent on its requests.
t13i751000_479067518aa3_d41ae481755e JA4 seen live210× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i781000_ab95583b6d39_d41ae481755e JA4 seen live13× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i781100_ab95583b6d39_ccd0985badbe JA4 seen live316× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i911100_0d5420ba6086_87b33ccefea8 JA4 seen live1× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i920900_1a0666d6c920_71f3a2441023 JA4 seen live2× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i970900_21fe6ccd8ec5_5fb67df6121e JA4 seen live5× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
t13i990900_760e5dff8384_5ac7197df9d2 JA4 seen live29× Scanner Probe (no SNI, no ALPN) — inferred from the JA4 handshake shape.
q13d0115h3_0f2cb44170f4_e9b4b416271b JA4 seen live1× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0115h3_0f2cb44170f4_fb190d169104 JA4 seen live2× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0116h3_0f2cb44170f4_df815552bcbf JA4 seen live1× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0215h3_62ed6f6ca7ad_fb190d169104 JA4 seen live1× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0215h3_fffbd61365f3_fb190d169104 JA4 seen live1× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0307h3_55b375c5d22e_945b2dc88d6b JA4 seen live14× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0308h3_55b375c5d22e_10107d85556e JA4 seen live2× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0308h3_55b375c5d22e_9a370787d3dd JA4 seen live1× Unclassified Presented a User-Agent we cannot attribute to a known client.
q13d0308h3_55b375c5d22e_d2b5c8c7ba45 JA4 seen live3× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0310h3_55b375c5d22e_6da5d9173cfb JA4 seen live11× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0311h3_55b375c5d22e_35002cbdedc5 JA4 seen live3422× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0311h3_55b375c5d22e_4a886e84af51 JA4 seen live6× Unclassified Presented a User-Agent we cannot attribute to a known client.
q13d0311h3_55b375c5d22e_512ac2397e4d JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0312h3_55b375c5d22e_03c564151835 JA4 seen live1× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0312h3_55b375c5d22e_0fd97f318465 JA4 seen live1× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0312h3_55b375c5d22e_21ef1e544c18 JA4 seen live1× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0312h3_55b375c5d22e_2fbbe4786686 JA4 seen live1× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0312h3_55b375c5d22e_5063bf5cc8ea JA4 seen live1× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0312h3_55b375c5d22e_5c0a0aff5045 JA4 seen live1× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0312h3_55b375c5d22e_d3a2dad44cbf JA4 seen live4× Unclassified Presented a User-Agent we cannot attribute to a known client.
q13d0314h3_55b375c5d22e_52fae87ca051 JA4 seen live1× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0315h3_55b375c5d22e_fb190d169104 JA4 seen live2× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0316h3_55b375c5d22e_df815552bcbf JA4 seen live1× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
q13d0412h3_16476d049b0b_a05e41356250 JA4 seen live16× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t00d1410h2_45de795eb070_4a1f08c76dc1 JA4 seen live35× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t00d1610h2_46e7e9700bed_34c01d0633e5 JA4 seen live105× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t00d310700_e8f1e7e78f70_285959464749 JA4 seen live35× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_0c65036c8509_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_0f5bc959ae24_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_0fb537d8e144_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_1275cc1ca538_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_14422b46a244_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_185cab9fea21_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_1c0a52334b2c_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_1c131e13d449_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_1f3ccb6b5971_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_224f5cbaaa26_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_23061ef215d6_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_23358192d48b_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_2858a708d91c_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_2c202acb5b0d_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_2de5af831e68_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_30605b3abcde_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_35db378cb09f_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_375aaf1d63fe_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_3c8714487106_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_3f56bb683bdc_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_3fede5d533e3_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_437c38fb20d7_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_462ecd6708d4_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_484ebc7627f0_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_4a513bce9f12_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_515ebe86e7c3_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_5470a87bf7fc_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_57c1461cef57_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_593aba79ccba_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_5bb0eb0ba27c_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_6376cb8fadaa_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_671e0306a5cb_b648b7f3bc8e JA4 seen live3× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_69d181a99895_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_69d68bc28b42_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_6d6b3751bd69_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_72fe80e83b5d_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_798dd72d0aaa_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_7ba938555a01_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_85064055552b_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_86ae22adfd52_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_8764e5090277_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.
t12d020400_8cde4933ab6b_b648b7f3bc8e JA4 seen live4× Unclassified Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented.

JA3 and JA4, and why the difference matters here

A TLS fingerprint identifies a client by how it is built, not by anything it claims. The cipher suites it offers, the extensions it sends, the order they appear in — all of that is decided by the TLS library and its configuration, and none of it is affected by changing a User-Agent string.

JA3 hashes the whole ClientHello into one MD5. It works, but it throws away every bit of structure: two fingerprints that differ by one cipher look no more related than two from unrelated software.

JA4 keeps the structure. The first component is plain text you can read without a lookup table — transport, TLS version, whether a server name was sent, how many ciphers and extensions, which ALPN. The second and third hash the ciphers and the extensions separately. That separation is what lets this directory group a scanner's twelve fingerprints into one family, because they share an extension hash while their cipher hashes differ.

How this database is used

It is not a reference list. The proxy loads it at startup and consults it on every TLS handshake, matching JA4 first and falling back to JA3, and the classification it returns feeds blocking, rate limiting and per-route allowlists. Two further checks run alongside it:

Replay detection flags one fingerprint appearing from many addresses inside a window — a single client build spread across a botnet. Drift detection flags a fingerprint whose cipher or extension composition changes while its hash stays put, which is the signature of something trying to wear another client's identity.

Directory generated 2026-09-21T06:10:02+00:00. Want to know your own? The Handshake Mirror reports it, along with the rest of your connection.