Showing all 3786 fingerprints. Page 34 of 38. JSON
| Fingerprint | Type | Tier | Class | Identified as |
|---|---|---|---|---|
| t12i1508h2_8daaf6152771_960578f014b5 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1508h2_8daaf6152771_9b566607c4f6 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1508h2_8daaf6152771_a0711822b781 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1508h2_8daaf6152771_a1d79d390f9f | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1508h2_8daaf6152771_ad4e5ebcc3e0 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1508h2_8daaf6152771_f1a111b46443 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1508h2_8daaf6152771_f2f9bc6a6b49 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1509h2_8daaf6152771_0faf7d3e4c5a | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1509h2_8daaf6152771_65d7df6850db | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1509h2_8daaf6152771_8720c114d136 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1509h2_8daaf6152771_baf35259f0a3 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1509h2_8daaf6152771_bd11714b9262 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1509h2_8daaf6152771_c9ac86013c8a | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1509h2_8daaf6152771_ea47e43b21a4 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1510h2_8daaf6152771_0f1c0d585a59 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1510h2_8daaf6152771_1adffa8f8dd6 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1510h2_8daaf6152771_8b729da37de9 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1510h2_8daaf6152771_8d28cf51bedc | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1510h2_8daaf6152771_980bfa27ccb2 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1510h2_8daaf6152771_ae700b083824 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1510h2_8daaf6152771_b8465e333ec7 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1510h2_8daaf6152771_b9ac5e6308c2 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1510h2_8daaf6152771_c094ecaabaea | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1510h2_8daaf6152771_d7ec8b2f1aa4 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1510h2_8daaf6152771_eb82186874a9 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1510h2_8daaf6152771_f386194d7ef6 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1511h2_8daaf6152771_0968e040be30 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1511h2_8daaf6152771_320e343aa6dc | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1511h2_8daaf6152771_52a5af5f622d | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1511h2_8daaf6152771_79cfec709a48 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1511h2_8daaf6152771_7be8703dfe02 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1511h2_8daaf6152771_7f120964cd27 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1511h2_8daaf6152771_8934c96212b8 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1511h2_8daaf6152771_d70f2e40ee3b | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1511h2_8daaf6152771_f185fa46ae68 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1512h2_8daaf6152771_67a5bdf8c29a | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1512h2_8daaf6152771_8423e8b48f42 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1512h2_8daaf6152771_96935d829e54 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1512h2_8daaf6152771_aa634d860130 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1512h2_8daaf6152771_ba231424323b | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1513h2_8daaf6152771_46542c49e17c | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1513h2_8daaf6152771_a4c022edbcae | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1513h2_8daaf6152771_cfc5794f8f3d | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1514h2_8daaf6152771_bd367129f6ad | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i2108ht_76e208dd3e22_09f609c8facd | JA4 | seen live4× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i4905ht_730fb1b0ac6a_8cd38e60fdc3 | JA4 | seen live38× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d0307h2_55b375c5d22e_2b813b6b2cb5 | JA4 | seen live3× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d030900_55b375c5d22e_3fb7e35edb64 | JA4 | seen live14× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d030900_55b375c5d22e_dce569508a71 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d031000_55b375c5d22e_b5f1502c64c6 | JA4 | seen live40× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d031100_55b375c5d22e_635104d325f0 | JA4 | seen live30× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d031100_55b375c5d22e_aeb2b64a872a | JA4 | seen live104× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d0312h2_55b375c5d22e_16d5fd281d0e | JA4 | seen live100× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d040600_f03b13587ee1_827bd6fd5353 | JA4 | seen live38× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d041100_16476d049b0b_73702258a521 | JA4 | seen live42× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d0411h2_16476d049b0b_a78b9a7aa7a1 | JA4 | seen live114× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d050500_13f69f63e3fe_1a196bf7ea71 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d050600_13f69f63e3fe_83fe30743d85 | JA4 | seen live8× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d050600_75d938f10e26_827bd6fd5353 | JA4 | seen live38× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d051000_d55e91d5c3b2_cc96517400c0 | JA4 | seen live3× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d060600_a150a9413979_827bd6fd5353 | JA4 | seen live228× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d060600_a6485224f4b1_83fe30743d85 | JA4 | seen live9× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d060700_a150a9413979_241b3681de17 | JA4 | seen live14× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d061100_a150a9413979_ce3af45f0a37 | JA4 | seen live38× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d061100_da75d768228b_408777b7afc8 | JA4 | seen live4× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070500_c2f3549b8eb7_1a196bf7ea71 | JA4 | seen live10× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070600_c2f3549b8eb7_83fe30743d85 | JA4 | seen live120× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070600_c2f3549b8eb7_aa419bfe26ff | JA4 | seen live38× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070600_c2f3549b8eb7_b3482a6e6e3b | JA4 | seen live27× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070700_c2f3549b8eb7_042c22f55c40 | JA4 | seen live3× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d090900_f91f431d341e_543460421724 | JA4 | seen live43× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d091000_f91f431d341e_978abd8b448c | JA4 | seen live69× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d091000_f91f431d341e_f6d7ce0f4a3c | JA4 | seen live27× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d101000_61a7ad8aa9b6_815af8d700c8 | JA4 | seen live5× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d1011h2_61a7ad8aa9b6_3d90412d0a0b | JA4 | seen live2× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d1011ht_61a7ad8aa9b6_723f4692b966 | JA4 | seen live17× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d1012ht_61a7ad8aa9b6_3ef862bd26ae | JA4 | seen live443× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1012ht_61a7ad8aa9b6_b38bd6d0bc9a | JA4 | seen live1319× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d111300_c5d436628c5c_d0a5066ca47b | JA4 | seen live1× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d1115h2_c5d436628c5c_9d2f91cd20f0 | JA4 | seen live19× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d121100_2fc95311a792_408777b7afc8 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1213ht_a538d02d76d5_768ed6726269 | JA4 | seen live2238× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d130900_be732f438736_53d4e768415e | JA4 | seen live2× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1311h2_a44d0ee8b3cc_480c14b18160 | JA4 | seen live2× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d1312h2_f57a46bbacb6_4f01dca9c5c2 | JA4 | seen live1× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d1410h2_f98f5dc5c741_ee7d08cce510 | JA4 | seen live5× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150500_8daaf6152771_1bb5de40f69a | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150500_8daaf6152771_391ba1f0e679 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150500_8daaf6152771_5e21bc867bec | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150500_8daaf6152771_f0c919a2e8f0 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150600_8daaf6152771_58b6c6ce6ae2 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150600_8daaf6152771_688629f82b44 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150600_8daaf6152771_76c7973ea616 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1506h2_8daaf6152771_7a3cf4f1c66e | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1506h2_8daaf6152771_a9e04bb141e9 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1506h2_8daaf6152771_b8c5baf5bfc8 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_268c334f7201 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_6c17e5da15d3 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_b0ca107e30de | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_ba26d0319553 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
JA3 and JA4, and why the difference matters here
A TLS fingerprint identifies a client by how it is built, not by anything it claims. The cipher suites it offers, the extensions it sends, the order they appear in — all of that is decided by the TLS library and its configuration, and none of it is affected by changing a User-Agent string.
JA3 hashes the whole ClientHello into one MD5. It works, but it throws away every bit of structure: two fingerprints that differ by one cipher look no more related than two from unrelated software.
JA4 keeps the structure. The first component is plain text you can read without a lookup table — transport, TLS version, whether a server name was sent, how many ciphers and extensions, which ALPN. The second and third hash the ciphers and the extensions separately. That separation is what lets this directory group a scanner's twelve fingerprints into one family, because they share an extension hash while their cipher hashes differ.
How this database is used
It is not a reference list. The proxy loads it at startup and consults it on every TLS handshake, matching JA4 first and falling back to JA3, and the classification it returns feeds blocking, rate limiting and per-route allowlists. Two further checks run alongside it:
Replay detection flags one fingerprint appearing from many addresses inside a window — a single client build spread across a botnet. Drift detection flags a fingerprint whose cipher or extension composition changes while its hash stays put, which is the signature of something trying to wear another client's identity.
Directory generated 2026-09-22T08:50:02+00:00. Want to know your own? The Handshake Mirror reports it, along with the rest of your connection.