Showing all 6833 fingerprints. Page 58 of 69. JSON
| Fingerprint | Type | Tier | Class | Identified as |
|---|---|---|---|---|
| t12d161000_bac3852d4616_71776a6e6e2b | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d170600_5b57614c22b0_047df114b631 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d1710h2_5d45335196f8_5302501154e5 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d1711h1_5b57614c22b0_d51f866a7e11 | JA4 | seen live3× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t12d180800_4b22cbed5bed_62f610611f10 | JA4 | seen live16× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d1809h1_5d04281c6031_08de9d6ffbb8 | JA4 | seen live1× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t12d1809h2_4da576aed5c1_6dadff81672f | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d1809h2_ca1ff0992a9f_a9efee95875b | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d1810h2_b1064e464c5c_e173790c61ff | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d190600_826a7383a64d_66cfc59077e0 | JA4 | seen live36× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d190700_724f0b7e6496_dead13803058 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d190700_d83cc789557e_8e03bb9b6084 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d190800_d83cc789557e_62f610611f10 | JA4 | seen live168× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d1909h2_04cf00e2c016_1ca79865cae6 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d1910h2_d83cc789557e_396e29a8f06b | JA4 | seen live2× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d1910h2_e23e2c49fe80_9cf6fd8da9d8 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d200600_19d7ba6ed342_617aa96a424f | JA4 | seen live5× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d200700_c903b3b6e441_6a6462463895 | JA4 | seen live2× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d2007h2_a8b3e4156f07_2eb009e832fe | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d210400_89c2427e67e4_b648b7f3bc8e | JA4 | seen live18× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d210800_76e208dd3e22_465a47a21f65 | JA4 | seen live12× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d220800_560f53e7a786_b80abeb657b1 | JA4 | seen live12× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d220800_fe100e50004f_b80abeb657b1 | JA4 | seen live11× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d2210h2_560f53e7a786_befba1ae359c | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d230800_31bea9ec6298_b80abeb657b1 | JA4 | seen live43× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d2310h2_f91c41aead95_5466d6a1e075 | JA4 | seen live3× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d240600_9295eb73ea51_7a3643a9f024 | JA4 | seen live9× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d260400_c69ecbaecc6c_16266c2fce5b | JA4 | seen live20× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d270800_a2460661a67a_5d316f34096e | JA4 | seen live7471× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d280700_b75078996b15_b85b7b870361 | JA4 | seen live3× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d280700_bbd4f008d9b2_122ea0d3d2f7 | JA4 | seen live68× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d280700_d943125447b4_b1069b7c31f3 | JA4 | seen live18× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d280800_d943125447b4_699838c0e161 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d281000_0df5e5c63df4_dc2a3e31388b | JA4 | seen live19× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d290700_fc2078a0b8c0_98c48c6649d0 | JA4 | seen live26× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d300600_a9ca94f90404_935ee41de825 | JA4 | seen live22× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d310600_f3b328a90fc1_25552ceac63b | JA4 | seen live7× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d310800_1d947a95fc68_834abc1a9a7d | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d320400_992cb694dc73_bacfa8fa5626 | JA4 | seen live57× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d320800_b415a99ff5d8_3ebdebe9c84d | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d330600_5172cef6ed69_334f0aaed909 | JA4 | seen live147× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d340200_280581216cf5_e4b0759bffdd | JA4 | seen live57× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d340600_498eeac4deb3_25552ceac63b | JA4 | seen live7× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d370400_3fce34ec6c8f_5d941312bb9a | JA4 | seen live24× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d380500_10ed599f3404_654fe63324b3 | JA4 | seen live79× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d3805ht_10ed599f3404_4f2194e778ad | JA4 | seen live25× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d3806ht_10ed599f3404_ac7f9eb85633 | JA4 | seen live7× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d400600_44c89e5422f1_a6ad5fe9ef24 | JA4 | seen live79× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d430500_1ce71f0edbb1_0b643df80691 | JA4 | seen live2× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d430700_1ce71f0edbb1_85fd39bfcaa8 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d460500_0b5b145d87b5_7447efa29e2f | JA4 | seen live5× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d490600_730fb1b0ac6a_25552ceac63b | JA4 | seen live218× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d4906ht_730fb1b0ac6a_d27d9be533b8 | JA4 | seen live56× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d490700_ed211f7843e6_b84f7053a7d6 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d4907ht_730fb1b0ac6a_20308a74e42f | JA4 | seen live61× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d520500_26e41e4f9c7e_d44182472191 | JA4 | seen live13× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d520600_7554301188de_a6ad5fe9ef24 | JA4 | seen live7× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d520700_3874cc0afe49_d4749a06ddf8 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d520800_9e42dd384d95_3ebdebe9c84d | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d560700_8aab05645947_b84f7053a7d6 | JA4 | seen live30× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d560700_99d8c53049f3_577401a16f57 | JA4 | seen live2× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d590600_7bd0586cbef7_6956cdc5de3d | JA4 | seen live2× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d5908h1_7bd0586cbef7_cf46fd089bfb | JA4 | seen live13× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d610700_8a10cb45a794_b84f7053a7d6 | JA4 | seen live253× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d620500_f293919562b9_654fe63324b3 | JA4 | seen live12× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d620700_106a9de34958_89e5d97212f3 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d640400_1715b94e3896_326c0be892b4 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d640400_1e98fdfb27e9_326c0be892b4 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d640400_a3acda31d846_326c0be892b4 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d640400_e31a90cd0803_326c0be892b4 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d640400_e7b476f9520b_326c0be892b4 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d640400_f559eb9565fd_326c0be892b4 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d640800_60fcec5a41cb_3ebdebe9c84d | JA4 | seen live5× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d650600_77b304177063_25552ceac63b | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d650600_77b304177063_6956cdc5de3d | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d650700_0dd215169a35_b84f7053a7d6 | JA4 | seen live38× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d670600_3d07528e3801_25552ceac63b | JA4 | seen live18× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d6912hq_ea0618708e31_39577bfd1595 | JA4 | seen live2585× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d6912ht_ea0618708e31_39577bfd1595 | JA4 | seen live2607× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d720800_1b75dbf8ecb1_bccd9a762ad0 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d8007h2_9cedc1f1428b_20308a74e42f | JA4 | seen live29× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d830800_f2e3c83f4807_02830a49146e | JA4 | seen live194× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d860600_e18388e7f3a3_25552ceac63b | JA4 | seen live279× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d860700_e18388e7f3a3_b84f7053a7d6 | JA4 | seen live3× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d880500_9d74d59be4ce_7562623a49ec | JA4 | seen live29× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d990500_039a0bf59e5c_7562623a49ec | JA4 | seen live29× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d990500_41a9ebd02c1f_7562623a49ec | JA4 | seen live233× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d990500_87ce778b49c2_8ce18dd517a1 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d990500_e91dfaae0f87_7562623a49ec | JA4 | seen live29× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d990500_ecf6b0aa1042_7562623a49ec | JA4 | seen live29× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d990700_9839e1f8b32d_91c50624ef9b | JA4 | seen live10× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d990700_a40d17a72bcb_b84f7053a7d6 | JA4 | seen live8× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d990700_ffeaddab04ac_b84f7053a7d6 | JA4 | seen live4× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12d990801_9839e1f8b32d_8bd0e887432c | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i0808h2_c9d1e06f98c4_ac6a06c2a0bd | JA4 | seen live104× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i0808ht_c9d1e06f98c4_ac6a06c2a0bd | JA4 | seen live105× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i0809h2_c9d1e06f98c4_199b71c7db97 | JA4 | seen live105× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1503h2_8daaf6152771_7ca2e5979b2a | JA4 | seen live3× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1503h2_8daaf6152771_a439cba1f1e7 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t12i1503h2_8daaf6152771_c97aa4dd9f5a | JA4 | seen live2× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
JA3 and JA4, and why the difference matters here
A TLS fingerprint identifies a client by how it is built, not by anything it claims. The cipher suites it offers, the extensions it sends, the order they appear in — all of that is decided by the TLS library and its configuration, and none of it is affected by changing a User-Agent string.
JA3 hashes the whole ClientHello into one MD5. It works, but it throws away every bit of structure: two fingerprints that differ by one cipher look no more related than two from unrelated software.
JA4 keeps the structure. The first component is plain text you can read without a lookup table — transport, TLS version, whether a server name was sent, how many ciphers and extensions, which ALPN. The second and third hash the ciphers and the extensions separately. That separation is what lets this directory group a scanner's twelve fingerprints into one family, because they share an extension hash while their cipher hashes differ.
How this database is used
It is not a reference list. The proxy loads it at startup and consults it on every TLS handshake, matching JA4 first and falling back to JA3, and the classification it returns feeds blocking, rate limiting and per-route allowlists. Two further checks run alongside it:
Replay detection flags one fingerprint appearing from many addresses inside a window — a single client build spread across a botnet. Drift detection flags a fingerprint whose cipher or extension composition changes while its hash stays put, which is the signature of something trying to wear another client's identity.
Directory generated 2026-10-07T17:20:03+00:00. Want to know your own? The Handshake Mirror reports it, along with the rest of your connection.