Showing all 6830 fingerprints. Page 61 of 69. JSON
| Fingerprint | Type | Tier | Class | Identified as |
|---|---|---|---|---|
| t13d0107h2_ee47968ec53b_e2515e582fb5 | JA4 | seen live207× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d011000_ee47968ec53b_b3d208934f58 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d011100_0f2cb44170f4_aeb2b64a872a | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d011100_58070c528ac8_aeb2b64a872a | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d011100_ee47968ec53b_aeb2b64a872a | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d0207h2_fffbd61365f3_e2515e582fb5 | JA4 | seen live194× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d0307h2_55b375c5d22e_2b813b6b2cb5 | JA4 | seen live3× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d030900_55b375c5d22e_3fb7e35edb64 | JA4 | seen live22× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d030900_55b375c5d22e_dce569508a71 | JA4 | seen live6× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d031000_55b375c5d22e_b5f1502c64c6 | JA4 | seen live44× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d031000_55b375c5d22e_c99e22d5336f | JA4 | seen live5× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d031000_5d5efb78cdb0_b5f1502c64c6 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d031100_55b375c5d22e_635104d325f0 | JA4 | seen live45× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d031100_55b375c5d22e_6f9e2867e4b9 | JA4 | seen live194× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d031100_55b375c5d22e_aeb2b64a872a | JA4 | seen live119× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d0312h2_55b375c5d22e_16d5fd281d0e | JA4 | seen live100× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d040600_f03b13587ee1_827bd6fd5353 | JA4 | seen live57× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d041000_ed60d9558351_b5f1502c64c6 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d041100_16476d049b0b_73702258a521 | JA4 | seen live63× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d0411h2_16476d049b0b_a78b9a7aa7a1 | JA4 | seen live171× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d050600_13f69f63e3fe_83fe30743d85 | JA4 | seen live26× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d050600_75d938f10e26_827bd6fd5353 | JA4 | seen live57× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d050700_fe8b0b18143e_2f3d4148c47a | JA4 | seen live46× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d051000_d55e91d5c3b2_cc96517400c0 | JA4 | seen live3× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d051000_fe8b0b18143e_b5f1502c64c6 | JA4 | seen live2× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d060500_a6485224f4b1_7f4491e7bc3b | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d060600_a150a9413979_827bd6fd5353 | JA4 | seen live357× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d060600_a6485224f4b1_83fe30743d85 | JA4 | seen live21× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d060700_a150a9413979_241b3681de17 | JA4 | seen live27× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d061100_a150a9413979_ce3af45f0a37 | JA4 | seen live57× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d061100_da75d768228b_408777b7afc8 | JA4 | seen live4× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070400_c2f3549b8eb7_d8799e1c6a2a | JA4 | seen live4× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070500_c2f3549b8eb7_7f4491e7bc3b | JA4 | seen live13× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070600_c2f3549b8eb7_4043a812f115 | JA4 | seen live12× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070600_c2f3549b8eb7_83fe30743d85 | JA4 | seen live241× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070600_c2f3549b8eb7_b3482a6e6e3b | JA4 | seen live63× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070600_c2f3549b8eb7_ec5015a3aa28 | JA4 | seen live71× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070700_c2f3549b8eb7_042c22f55c40 | JA4 | seen live3× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070700_c2f3549b8eb7_41917e49ace6 | JA4 | seen live8× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070700_c2f3549b8eb7_789c7f32381e | JA4 | seen live8× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070700_c2f3549b8eb7_78f1cb93ff72 | JA4 | seen live9× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070700_c2f3549b8eb7_f704dab46ad1 | JA4 | seen live107× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d0707h2_c2f3549b8eb7_e2515e582fb5 | JA4 | seen live13840× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070800_c2f3549b8eb7_f9f33d96b593 | JA4 | seen live8× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070900_c2f3549b8eb7_94c5e2e22320 | JA4 | seen live3× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d070900_c2f3549b8eb7_bf114986101a | JA4 | seen live2823× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d080500_9a5205a0092a_7f4491e7bc3b | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d080600_9a5205a0092a_ec5015a3aa28 | JA4 | seen live8× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d090900_f91f431d341e_543460421724 | JA4 | seen live43× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d091000_f91f431d341e_0e0b92dd4b31 | JA4 | seen live7× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d091000_f91f431d341e_978abd8b448c | JA4 | seen live69× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d091000_f91f431d341e_f6d7ce0f4a3c | JA4 | seen live80× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d0911h1_f91f431d341e_fe5d0254026e | JA4 | seen live121× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1010h1_61a7ad8aa9b6_9984e387be52 | JA4 | seen live1× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d1011h2_61a7ad8aa9b6_3d90412d0a0b | JA4 | seen live26× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d1012h1_61a7ad8aa9b6_5461484b2bee | JA4 | seen live108× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1012h1_61a7ad8aa9b6_8f8fab9fb325 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d111300_c5d436628c5c_d0a5066ca47b | JA4 | seen live1× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d1115h2_c5d436628c5c_9d2f91cd20f0 | JA4 | seen live52× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d121100_2fc95311a792_408777b7afc8 | JA4 | seen live2× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1213ht_a538d02d76d5_768ed6726269 | JA4 | seen live2388× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d130600_f6a34bea2645_910bb7675965 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d130900_be732f438736_53d4e768415e | JA4 | seen live2× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1311h2_a44d0ee8b3cc_480c14b18160 | JA4 | seen live2× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d1312h2_f57a46bbacb6_a986e7d46cbf | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1314h2_f57a46bbacb6_80a565061df8 | JA4 | seen live1× | Unclassified | Presented a User-Agent we cannot attribute to a known client. |
| t13d1410h2_f98f5dc5c741_ee7d08cce510 | JA4 | seen live5× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150400_8daaf6152771_3bd6c5ce4416 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150400_8daaf6152771_4c3dd6207bcf | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150500_8daaf6152771_1bb5de40f69a | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150500_8daaf6152771_391ba1f0e679 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150500_8daaf6152771_5e21bc867bec | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150500_8daaf6152771_6057223aca2e | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150500_8daaf6152771_a5981f5ff601 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150500_8daaf6152771_aa7ad8ad0bef | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150500_8daaf6152771_ffa773eb06e4 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1505h2_8daaf6152771_7cf1c60686f3 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150600_8daaf6152771_411f8ac64ede | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150600_8daaf6152771_58b6c6ce6ae2 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150600_8daaf6152771_688629f82b44 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150600_8daaf6152771_76c7973ea616 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150600_8daaf6152771_7fbae1976b3c | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150600_8daaf6152771_94a2796ae212 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150600_8daaf6152771_d56370aaf737 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150600_8daaf6152771_d88e2aa8351a | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150600_8daaf6152771_ddc3546c1667 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150600_8daaf6152771_fc0dbf8bd3da | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1506h2_8daaf6152771_7a3cf4f1c66e | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1506h2_8daaf6152771_a9e04bb141e9 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d1506h2_8daaf6152771_b8c5baf5bfc8 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_268c334f7201 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_36825d3488d7 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_423a721297e2 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_6c17e5da15d3 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_b0ca107e30de | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_ba26d0319553 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_c56da6ed1177 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_d392a8dd072a | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_dc3a3a0b5a7f | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
| t13d150700_8daaf6152771_e05705feb738 | JA4 | seen live1× | Unclassified | Completed a TLS handshake but never an HTTP request, so no User-Agent was ever presented. |
JA3 and JA4, and why the difference matters here
A TLS fingerprint identifies a client by how it is built, not by anything it claims. The cipher suites it offers, the extensions it sends, the order they appear in — all of that is decided by the TLS library and its configuration, and none of it is affected by changing a User-Agent string.
JA3 hashes the whole ClientHello into one MD5. It works, but it throws away every bit of structure: two fingerprints that differ by one cipher look no more related than two from unrelated software.
JA4 keeps the structure. The first component is plain text you can read without a lookup table — transport, TLS version, whether a server name was sent, how many ciphers and extensions, which ALPN. The second and third hash the ciphers and the extensions separately. That separation is what lets this directory group a scanner's twelve fingerprints into one family, because they share an extension hash while their cipher hashes differ.
How this database is used
It is not a reference list. The proxy loads it at startup and consults it on every TLS handshake, matching JA4 first and falling back to JA3, and the classification it returns feeds blocking, rate limiting and per-route allowlists. Two further checks run alongside it:
Replay detection flags one fingerprint appearing from many addresses inside a window — a single client build spread across a botnet. Drift detection flags a fingerprint whose cipher or extension composition changes while its hash stays put, which is the signature of something trying to wear another client's identity.
Directory generated 2026-10-07T16:00:03+00:00. Want to know your own? The Handshake Mirror reports it, along with the rest of your connection.