tlsfinger

TLS / HTTP 请求指纹检测 - angdh

JSON

服务端请求指纹

Request ID
7919
IP
216.73.216.52
User-Agent
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Client -> Nginx Protocol
HTTP/2.0, HTTP/2.0
Header Order
host -> x-real-ip -> x-forwarded-for -> x-forwarded-proto -> x-ngf-client-protocol -> x-ngf-client-ip -> x-ngf-client-remote-port -> x-ngf-server-local-port -> x-ja3 -> x-ja3-hash -> x-ja4 -> x-ja4h -> x-ja4-one -> x-ja4-tcp -> x-ja4s -> x-ngf-http-ssl-ja3-greased -> x-ngf-http-ssl-ja4tcp-window -> x-ngf-http-ssl-ja4tcp-options-text -> x-ngf-http-ssl-ja4tcp-mss -> x-ngf-http-ssl-ja4tcp-window-scale -> x-ngf-http-ssl-ja3-version -> x-ngf-http-ssl-ja3-ciphers -> x-ngf-http-ssl-ja3-extensions -> x-ngf-http-ssl-ja3-curves -> x-ngf-http-ssl-ja3-point-formats -> x-ngf-http-clienthello-raw-len -> x-ngf-http-clienthello-raw-sha256 -> x-ngf-http-clienthello-legacy-version -> x-ngf-http-clienthello-cipher-count -> x-ngf-http-clienthello-cipher-count-nogrease -> x-ngf-http-clienthello-extension-count -> x-ngf-http-clienthello-extension-count-nogrease -> x-ngf-http-clienthello-extension-order-raw -> x-ngf-http-clienthello-extension-order-nogrease -> x-ngf-http-clienthello-supported-versions -> x-ngf-http-clienthello-supported-versions-order -> x-ngf-http-clienthello-signature-algorithms -> x-ngf-http-clienthello-supported-groups -> x-ngf-http-clienthello-key-share-groups -> x-ngf-http-clienthello-alpn -> x-ngf-http-clienthello-sni -> x-ngf-http-clienthello-session-resumption-hint -> x-ngf-http-clienthello-grease-compliance -> x-http2-fingerprint -> x-ngf-http2-fingerprint-settings -> x-ngf-http2-fingerprint-window-update -> x-ngf-http2-fingerprint-pseudo-headers -> x-ngf-http2-first-frame-sequence -> x-ngf-http2-hpack-indexing-summary -> x-ngf-connection -> x-ngf-connection-requests -> x-ngf-request-time -> x-ngf-request-length -> x-ngf-http-socket-tcp-rtt -> x-ngf-http-socket-tcp-min-rtt -> x-ngf-http-socket-tcp-retransmits -> x-ngf-http-socket-tcp-total-retrans -> x-ngf-http-socket-tcp-delivery-rate -> x-ngf-http-socket-tcp-congestion -> x-ngf-http-socket-tcp-options-text -> x-ngf-http-socket-tcp-rcv-mss -> x-ngf-http-socket-tcp-snd-mss -> x-ngf-client-protocol -> x-ngf-client-ip -> x-ngf-client-remote-port -> x-ngf-server-local-port -> x-ja3 -> x-ja3-hash -> x-ja4 -> x-ja4h -> x-ja4-one -> x-ja4-tcp -> x-ja4s -> x-ngf-http-ssl-ja3-greased -> x-ngf-http-ssl-ja4tcp-window -> x-ngf-http-ssl-ja4tcp-options-text -> x-ngf-http-ssl-ja4tcp-mss -> x-ngf-http-ssl-ja4tcp-window-scale -> x-ngf-http-ssl-ja3-version -> x-ngf-http-ssl-ja3-ciphers -> x-ngf-http-ssl-ja3-extensions -> x-ngf-http-ssl-ja3-curves -> x-ngf-http-ssl-ja3-point-formats -> x-ngf-http-clienthello-raw-len -> x-ngf-http-clienthello-raw-sha256 -> x-ngf-http-clienthello-legacy-version -> x-ngf-http-clienthello-cipher-count -> x-ngf-http-clienthello-cipher-count-nogrease -> x-ngf-http-clienthello-extension-count -> x-ngf-http-clienthello-extension-count-nogrease -> x-ngf-http-clienthello-extension-order-raw -> x-ngf-http-clienthello-extension-order-nogrease -> x-ngf-http-clienthello-supported-versions -> x-ngf-http-clienthello-supported-versions-order -> x-ngf-http-clienthello-signature-algorithms -> x-ngf-http-clienthello-supported-groups -> x-ngf-http-clienthello-key-share-groups -> x-ngf-http-clienthello-alpn -> x-ngf-http-clienthello-sni -> x-ngf-http-clienthello-session-resumption-hint -> x-ngf-http-clienthello-grease-compliance -> x-http2-fingerprint -> x-ngf-http2-fingerprint-settings -> x-ngf-http2-fingerprint-window-update -> x-ngf-http2-fingerprint-pseudo-headers -> x-ngf-http2-first-frame-sequence -> x-ngf-http2-hpack-indexing-summary -> x-ngf-connection -> x-ngf-connection-requests -> x-ngf-request-time -> x-ngf-request-length -> x-ngf-http-socket-tcp-rtt -> x-ngf-http-socket-tcp-min-rtt -> x-ngf-http-socket-tcp-retransmits -> x-ngf-http-socket-tcp-total-retrans -> x-ngf-http-socket-tcp-delivery-rate -> x-ngf-http-socket-tcp-congestion -> x-ngf-http-socket-tcp-options-text -> x-ngf-http-socket-tcp-rcv-mss -> x-ngf-http-socket-tcp-snd-mss -> accept -> user-agent -> accept-encoding
Header Order Hash
4ddf63c16d567fa4744c2f71ea2f2a914b43afa90f3362205a3af76c634011bc
Header Value Hash
c71cd85ae6ae965ade92811e1bc2d3aea765a372c31ffc13f09f43e231e7a3d7
HTTP Fingerprint
a607ce83dae545654e76bdd5eb438496ac3a96471a80c6b5d92e4b6bd9b059f4
Risk Score
40 / 100
Risk Level
suspicious
Risk Reasons
Accept-Language missing; Browser-like UA but Accept does not look like browser navigation; Cookie header not present on this request

浏览器 JS 指纹

Status
Collecting...

Protocol

Client -> Nginx Protocol
HTTP/2.0, HTTP/2.0
Client IP
216.73.216.52, 216.73.216.52
Client Remote Port
63095, 63095
Server Local Port
443, 443

TLS / JA3 / JA4

JA3
771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0, 771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0
JA3 Hash
4aef5fa3a53d4fcd83c0b1722d714b16, 4aef5fa3a53d4fcd83c0b1722d714b16
JA3 GREASE Alias
0, 0
JA4
t13d1011_61a7ad8aa9b6_d0f89c11dd05, t13d1011_61a7ad8aa9b6_d0f89c11dd05
JA4H
ge20n04_be74ea4f9dce, ge20n04_be74ea4f9dce
JA4one
t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_, t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_
JA4TCP
62727_2-4-8-1-3_1460_7, 62727_2-4-8-1-3_1460_7
JA4TCP Window
62727, 62727
JA4TCP Options Text
MSS,SACK,TS,NOP,WS, MSS,SACK,TS,NOP,WS
JA4TCP MSS
1460, 1460
JA4TCP Window Scale
7, 7
JA4S
h220_02_c9816e0798f9_2097152_5242880_0, h220_02_c9816e0798f9_2097152_5242880_0

JA3 Components / GREASE

JA3 TLS Version
771, 771
JA3 Ciphers
4866-4865-4867-49196-49195-52393-49200-49199-52392-255, 4866-4865-4867-49196-49195-52393-49200-49199-52392-255
JA3 Extensions
23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5
JA3 Curves / Groups
29-23-24, 29-23-24
JA3 Point Formats
0, 0

ClientHello Structure

ClientHello Raw Length
192, 192
ClientHello Raw SHA256
47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5, 47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5
ClientHello Legacy Version
771, 771
Cipher Count
10, 10
Cipher Count No GREASE
10, 10
Extension Count
11, 11
Extension Count No GREASE
11, 11
Extension Order Raw
23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5
Extension Order No GREASE
23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5
Supported Versions
772-771, 772-771
Supported Versions Order
772-771, 772-771
Signature Algorithms
1283-1027-2055-2054-2053-2052-1537-1281-1025, 1283-1027-2055-2054-2053-2052-1537-1281-1025
Supported Groups
29-23-24, 29-23-24
Key Share Groups
29, 29
ALPN
h2,http/1.1, h2,http/1.1
SNI
tlsfinger.kdns.fr, tlsfinger.kdns.fr
Session Resumption Hint
session_ticket, session_ticket
GREASE Compliance
cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0, cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0

HTTP/2

HTTP/2 Fingerprint
2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p, 2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p
HTTP/2 SETTINGS
2:0;4:2097152;5:16384;6:16384, 2:0;4:2097152;5:16384;6:16384
HTTP/2 Window Update
5177345, 5177345
HTTP/2 Pseudo Headers
m,s,a,p, m,s,a,p
First Frame Sequence
4,8,1, 4,8,1
HPACK Indexing Summary
size_updates=0;dynamic_refs=0;incremental=4, size_updates=0;dynamic_refs=0;incremental=4

Connection / TCP Socket

Nginx Connection ID
112467, 112467
Connection Requests
1, 1
Request Time
0.000, 0.000
Request Length
123, 123
TCP RTT
212295, 212295
TCP Min RTT
212245, 212245
TCP Retransmits
0, 0
TCP Total Retrans
0, 0
TCP Delivery Rate
27187, 27187
TCP Congestion
cubic, cubic
TCP Options Text
TIMESTAMPS,SACK,WSCALE, TIMESTAMPS,SACK,WSCALE
TCP Receive MSS
536, 536
TCP Send MSS
1448, 1448

原始请求头

按 Node 接收到的顺序和大小写展示。经过 nginx 反代后，这不是客户端到 nginx 的第一跳原始顺序。

01. Host
tlsfinger.kdns.fr
02. X-Real-IP
216.73.216.52
03. X-Forwarded-For
216.73.216.52
04. X-Forwarded-Proto
https
05. X-NGF-Client-Protocol
HTTP/2.0
06. X-NGF-Client-IP
216.73.216.52
07. X-NGF-Client-Remote-Port
63095
08. X-NGF-Server-Local-Port
443
09. X-JA3
771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0
10. X-JA3-Hash
4aef5fa3a53d4fcd83c0b1722d714b16
11. X-JA4
t13d1011_61a7ad8aa9b6_d0f89c11dd05
12. X-JA4H
ge20n04_be74ea4f9dce
13. X-JA4-One
t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_
14. X-JA4-TCP
62727_2-4-8-1-3_1460_7
15. X-JA4S
h220_02_c9816e0798f9_2097152_5242880_0
16. X-NGF-HTTP-SSL-JA3-Greased
0
17. X-NGF-HTTP-SSL-JA4TCP-Window
62727
18. X-NGF-HTTP-SSL-JA4TCP-Options-Text
MSS,SACK,TS,NOP,WS
19. X-NGF-HTTP-SSL-JA4TCP-MSS
1460
20. X-NGF-HTTP-SSL-JA4TCP-Window-Scale
7
21. X-NGF-HTTP-SSL-JA3-Version
771
22. X-NGF-HTTP-SSL-JA3-Ciphers
4866-4865-4867-49196-49195-52393-49200-49199-52392-255
23. X-NGF-HTTP-SSL-JA3-Extensions
23-13-45-43-35-51-10-0-16-11-5
24. X-NGF-HTTP-SSL-JA3-Curves
29-23-24
25. X-NGF-HTTP-SSL-JA3-Point-Formats
0
26. X-NGF-HTTP-ClientHello-Raw-Len
192
27. X-NGF-HTTP-ClientHello-Raw-SHA256
47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5
28. X-NGF-HTTP-ClientHello-Legacy-Version
771
29. X-NGF-HTTP-ClientHello-Cipher-Count
10
30. X-NGF-HTTP-ClientHello-Cipher-Count-NoGrease
10
31. X-NGF-HTTP-ClientHello-Extension-Count
11
32. X-NGF-HTTP-ClientHello-Extension-Count-NoGrease
11
33. X-NGF-HTTP-ClientHello-Extension-Order-Raw
23-13-45-43-35-51-10-0-16-11-5
34. X-NGF-HTTP-ClientHello-Extension-Order-NoGrease
23-13-45-43-35-51-10-0-16-11-5
35. X-NGF-HTTP-ClientHello-Supported-Versions
772-771
36. X-NGF-HTTP-ClientHello-Supported-Versions-Order
772-771
37. X-NGF-HTTP-ClientHello-Signature-Algorithms
1283-1027-2055-2054-2053-2052-1537-1281-1025
38. X-NGF-HTTP-ClientHello-Supported-Groups
29-23-24
39. X-NGF-HTTP-ClientHello-Key-Share-Groups
29
40. X-NGF-HTTP-ClientHello-ALPN
h2,http/1.1
41. X-NGF-HTTP-ClientHello-SNI
tlsfinger.kdns.fr
42. X-NGF-HTTP-ClientHello-Session-Resumption-Hint
session_ticket
43. X-NGF-HTTP-ClientHello-Grease-Compliance
cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0
44. X-HTTP2-Fingerprint
2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p
45. X-NGF-HTTP2-Fingerprint-Settings
2:0;4:2097152;5:16384;6:16384
46. X-NGF-HTTP2-Fingerprint-Window-Update
5177345
47. X-NGF-HTTP2-Fingerprint-Pseudo-Headers
m,s,a,p
48. X-NGF-HTTP2-First-Frame-Sequence
4,8,1
49. X-NGF-HTTP2-HPACK-Indexing-Summary
size_updates=0;dynamic_refs=0;incremental=4
50. X-NGF-Connection
112467
51. X-NGF-Connection-Requests
1
52. X-NGF-Request-Time
0.000
53. X-NGF-Request-Length
123
54. X-NGF-HTTP-Socket-TCP-RTT
212295
55. X-NGF-HTTP-Socket-TCP-Min-RTT
212245
56. X-NGF-HTTP-Socket-TCP-Retransmits
0
57. X-NGF-HTTP-Socket-TCP-Total-Retrans
0
58. X-NGF-HTTP-Socket-TCP-Delivery-Rate
27187
59. X-NGF-HTTP-Socket-TCP-Congestion
cubic
60. X-NGF-HTTP-Socket-TCP-Options-Text
TIMESTAMPS,SACK,WSCALE
61. X-NGF-HTTP-Socket-TCP-Rcv-MSS
536
62. X-NGF-HTTP-Socket-TCP-Snd-MSS
1448
63. X-NGF-Client-Protocol
HTTP/2.0
64. X-NGF-Client-IP
216.73.216.52
65. X-NGF-Client-Remote-Port
63095
66. X-NGF-Server-Local-Port
443
67. X-JA3
771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0
68. X-JA3-Hash
4aef5fa3a53d4fcd83c0b1722d714b16
69. X-JA4
t13d1011_61a7ad8aa9b6_d0f89c11dd05
70. X-JA4H
ge20n04_be74ea4f9dce
71. X-JA4-One
t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_
72. X-JA4-TCP
62727_2-4-8-1-3_1460_7
73. X-JA4S
h220_02_c9816e0798f9_2097152_5242880_0
74. X-NGF-HTTP-SSL-JA3-Greased
0
75. X-NGF-HTTP-SSL-JA4TCP-Window
62727
76. X-NGF-HTTP-SSL-JA4TCP-Options-Text
MSS,SACK,TS,NOP,WS
77. X-NGF-HTTP-SSL-JA4TCP-MSS
1460
78. X-NGF-HTTP-SSL-JA4TCP-Window-Scale
7
79. X-NGF-HTTP-SSL-JA3-Version
771
80. X-NGF-HTTP-SSL-JA3-Ciphers
4866-4865-4867-49196-49195-52393-49200-49199-52392-255
81. X-NGF-HTTP-SSL-JA3-Extensions
23-13-45-43-35-51-10-0-16-11-5
82. X-NGF-HTTP-SSL-JA3-Curves
29-23-24
83. X-NGF-HTTP-SSL-JA3-Point-Formats
0
84. X-NGF-HTTP-ClientHello-Raw-Len
192
85. X-NGF-HTTP-ClientHello-Raw-SHA256
47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5
86. X-NGF-HTTP-ClientHello-Legacy-Version
771
87. X-NGF-HTTP-ClientHello-Cipher-Count
10
88. X-NGF-HTTP-ClientHello-Cipher-Count-NoGrease
10
89. X-NGF-HTTP-ClientHello-Extension-Count
11
90. X-NGF-HTTP-ClientHello-Extension-Count-NoGrease
11
91. X-NGF-HTTP-ClientHello-Extension-Order-Raw
23-13-45-43-35-51-10-0-16-11-5
92. X-NGF-HTTP-ClientHello-Extension-Order-NoGrease
23-13-45-43-35-51-10-0-16-11-5
93. X-NGF-HTTP-ClientHello-Supported-Versions
772-771
94. X-NGF-HTTP-ClientHello-Supported-Versions-Order
772-771
95. X-NGF-HTTP-ClientHello-Signature-Algorithms
1283-1027-2055-2054-2053-2052-1537-1281-1025
96. X-NGF-HTTP-ClientHello-Supported-Groups
29-23-24
97. X-NGF-HTTP-ClientHello-Key-Share-Groups
29
98. X-NGF-HTTP-ClientHello-ALPN
h2,http/1.1
99. X-NGF-HTTP-ClientHello-SNI
tlsfinger.kdns.fr
100. X-NGF-HTTP-ClientHello-Session-Resumption-Hint
session_ticket
101. X-NGF-HTTP-ClientHello-Grease-Compliance
cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0
102. X-HTTP2-Fingerprint
2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p
103. X-NGF-HTTP2-Fingerprint-Settings
2:0;4:2097152;5:16384;6:16384
104. X-NGF-HTTP2-Fingerprint-Window-Update
5177345
105. X-NGF-HTTP2-Fingerprint-Pseudo-Headers
m,s,a,p
106. X-NGF-HTTP2-First-Frame-Sequence
4,8,1
107. X-NGF-HTTP2-HPACK-Indexing-Summary
size_updates=0;dynamic_refs=0;incremental=4
108. X-NGF-Connection
112467
109. X-NGF-Connection-Requests
1
110. X-NGF-Request-Time
0.000
111. X-NGF-Request-Length
123
112. X-NGF-HTTP-Socket-TCP-RTT
212295
113. X-NGF-HTTP-Socket-TCP-Min-RTT
212245
114. X-NGF-HTTP-Socket-TCP-Retransmits
0
115. X-NGF-HTTP-Socket-TCP-Total-Retrans
0
116. X-NGF-HTTP-Socket-TCP-Delivery-Rate
27187
117. X-NGF-HTTP-Socket-TCP-Congestion
cubic
118. X-NGF-HTTP-Socket-TCP-Options-Text
TIMESTAMPS,SACK,WSCALE
119. X-NGF-HTTP-Socket-TCP-Rcv-MSS
536
120. X-NGF-HTTP-Socket-TCP-Snd-MSS
1448
121. accept
*/*
122. user-agent
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
123. accept-encoding
gzip, br, zstd, deflate

Cookie 明细

HTTP/2 客户端可能把 Cookie 拆成多个 cookie header field；经过 nginx 反代到 Node 后通常会合并成一个 Cookie 头，这里再按分号拆开展示。

No data

Custom Cookie Header Probe

Forwarded Nginx Headers (58)
x-http2-fingerprint
2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p, 2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p
x-ja3
771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0, 771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0
x-ja3-hash
4aef5fa3a53d4fcd83c0b1722d714b16, 4aef5fa3a53d4fcd83c0b1722d714b16
x-ja4
t13d1011_61a7ad8aa9b6_d0f89c11dd05, t13d1011_61a7ad8aa9b6_d0f89c11dd05
x-ja4-one
t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_, t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_
x-ja4-tcp
62727_2-4-8-1-3_1460_7, 62727_2-4-8-1-3_1460_7
x-ja4h
ge20n04_be74ea4f9dce, ge20n04_be74ea4f9dce
x-ja4s
h220_02_c9816e0798f9_2097152_5242880_0, h220_02_c9816e0798f9_2097152_5242880_0
x-ngf-client-ip
216.73.216.52, 216.73.216.52
x-ngf-client-protocol
HTTP/2.0, HTTP/2.0
x-ngf-client-remote-port
63095, 63095
x-ngf-connection
112467, 112467
x-ngf-connection-requests
1, 1
x-ngf-http-clienthello-alpn
h2,http/1.1, h2,http/1.1
x-ngf-http-clienthello-cipher-count
10, 10
x-ngf-http-clienthello-cipher-count-nogrease
10, 10
x-ngf-http-clienthello-extension-count
11, 11
x-ngf-http-clienthello-extension-count-nogrease
11, 11
x-ngf-http-clienthello-extension-order-nogrease
23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5
x-ngf-http-clienthello-extension-order-raw
23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5
x-ngf-http-clienthello-grease-compliance
cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0, cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0
x-ngf-http-clienthello-key-share-groups
29, 29
x-ngf-http-clienthello-legacy-version
771, 771
x-ngf-http-clienthello-raw-len
192, 192
x-ngf-http-clienthello-raw-sha256
47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5, 47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5
x-ngf-http-clienthello-session-resumption-hint
session_ticket, session_ticket
x-ngf-http-clienthello-signature-algorithms
1283-1027-2055-2054-2053-2052-1537-1281-1025, 1283-1027-2055-2054-2053-2052-1537-1281-1025
x-ngf-http-clienthello-sni
tlsfinger.kdns.fr, tlsfinger.kdns.fr
x-ngf-http-clienthello-supported-groups
29-23-24, 29-23-24
x-ngf-http-clienthello-supported-versions
772-771, 772-771
x-ngf-http-clienthello-supported-versions-order
772-771, 772-771
x-ngf-http-socket-tcp-congestion
cubic, cubic
x-ngf-http-socket-tcp-delivery-rate
27187, 27187
x-ngf-http-socket-tcp-min-rtt
212245, 212245
x-ngf-http-socket-tcp-options-text
TIMESTAMPS,SACK,WSCALE, TIMESTAMPS,SACK,WSCALE
x-ngf-http-socket-tcp-rcv-mss
536, 536
x-ngf-http-socket-tcp-retransmits
0, 0
x-ngf-http-socket-tcp-rtt
212295, 212295
x-ngf-http-socket-tcp-snd-mss
1448, 1448
x-ngf-http-socket-tcp-total-retrans
0, 0
x-ngf-http-ssl-ja3-ciphers
4866-4865-4867-49196-49195-52393-49200-49199-52392-255, 4866-4865-4867-49196-49195-52393-49200-49199-52392-255
x-ngf-http-ssl-ja3-curves
29-23-24, 29-23-24
x-ngf-http-ssl-ja3-extensions
23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5
x-ngf-http-ssl-ja3-greased
0, 0
x-ngf-http-ssl-ja3-point-formats
0, 0
x-ngf-http-ssl-ja3-version
771, 771
x-ngf-http-ssl-ja4tcp-mss
1460, 1460
x-ngf-http-ssl-ja4tcp-options-text
MSS,SACK,TS,NOP,WS, MSS,SACK,TS,NOP,WS
x-ngf-http-ssl-ja4tcp-window
62727, 62727
x-ngf-http-ssl-ja4tcp-window-scale
7, 7
x-ngf-http2-fingerprint-pseudo-headers
m,s,a,p, m,s,a,p
x-ngf-http2-fingerprint-settings
2:0;4:2097152;5:16384;6:16384, 2:0;4:2097152;5:16384;6:16384
x-ngf-http2-fingerprint-window-update
5177345, 5177345
x-ngf-http2-first-frame-sequence
4,8,1, 4,8,1
x-ngf-http2-hpack-indexing-summary
size_updates=0;dynamic_refs=0;incremental=4, size_updates=0;dynamic_refs=0;incremental=4
x-ngf-request-length
123, 123
x-ngf-request-time
0.000, 0.000
x-ngf-server-local-port
443, 443

Raw JSON

{
  "requestId": 7919,
  "server": {
    "timestamp": "2026-10-30T00:05:07.909Z",
    "ip": "216.73.216.52",
    "method": "GET",
    "url": "/",
    "httpVersion": "1.1",
    "rawHeaders": [
      "Host",
      "tlsfinger.kdns.fr",
      "X-Real-IP",
      "216.73.216.52",
      "X-Forwarded-For",
      "216.73.216.52",
      "X-Forwarded-Proto",
      "https",
      "X-NGF-Client-Protocol",
      "HTTP/2.0",
      "X-NGF-Client-IP",
      "216.73.216.52",
      "X-NGF-Client-Remote-Port",
      "63095",
      "X-NGF-Server-Local-Port",
      "443",
      "X-JA3",
      "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0",
      "X-JA3-Hash",
      "4aef5fa3a53d4fcd83c0b1722d714b16",
      "X-JA4",
      "t13d1011_61a7ad8aa9b6_d0f89c11dd05",
      "X-JA4H",
      "ge20n04_be74ea4f9dce",
      "X-JA4-One",
      "t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_",
      "X-JA4-TCP",
      "62727_2-4-8-1-3_1460_7",
      "X-JA4S",
      "h220_02_c9816e0798f9_2097152_5242880_0",
      "X-NGF-HTTP-SSL-JA3-Greased",
      "0",
      "X-NGF-HTTP-SSL-JA4TCP-Window",
      "62727",
      "X-NGF-HTTP-SSL-JA4TCP-Options-Text",
      "MSS,SACK,TS,NOP,WS",
      "X-NGF-HTTP-SSL-JA4TCP-MSS",
      "1460",
      "X-NGF-HTTP-SSL-JA4TCP-Window-Scale",
      "7",
      "X-NGF-HTTP-SSL-JA3-Version",
      "771",
      "X-NGF-HTTP-SSL-JA3-Ciphers",
      "4866-4865-4867-49196-49195-52393-49200-49199-52392-255",
      "X-NGF-HTTP-SSL-JA3-Extensions",
      "23-13-45-43-35-51-10-0-16-11-5",
      "X-NGF-HTTP-SSL-JA3-Curves",
      "29-23-24",
      "X-NGF-HTTP-SSL-JA3-Point-Formats",
      "0",
      "X-NGF-HTTP-ClientHello-Raw-Len",
      "192",
      "X-NGF-HTTP-ClientHello-Raw-SHA256",
      "47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5",
      "X-NGF-HTTP-ClientHello-Legacy-Version",
      "771",
      "X-NGF-HTTP-ClientHello-Cipher-Count",
      "10",
      "X-NGF-HTTP-ClientHello-Cipher-Count-NoGrease",
      "10",
      "X-NGF-HTTP-ClientHello-Extension-Count",
      "11",
      "X-NGF-HTTP-ClientHello-Extension-Count-NoGrease",
      "11",
      "X-NGF-HTTP-ClientHello-Extension-Order-Raw",
      "23-13-45-43-35-51-10-0-16-11-5",
      "X-NGF-HTTP-ClientHello-Extension-Order-NoGrease",
      "23-13-45-43-35-51-10-0-16-11-5",
      "X-NGF-HTTP-ClientHello-Supported-Versions",
      "772-771",
      "X-NGF-HTTP-ClientHello-Supported-Versions-Order",
      "772-771",
      "X-NGF-HTTP-ClientHello-Signature-Algorithms",
      "1283-1027-2055-2054-2053-2052-1537-1281-1025",
      "X-NGF-HTTP-ClientHello-Supported-Groups",
      "29-23-24",
      "X-NGF-HTTP-ClientHello-Key-Share-Groups",
      "29",
      "X-NGF-HTTP-ClientHello-ALPN",
      "h2,http/1.1",
      "X-NGF-HTTP-ClientHello-SNI",
      "tlsfinger.kdns.fr",
      "X-NGF-HTTP-ClientHello-Session-Resumption-Hint",
      "session_ticket",
      "X-NGF-HTTP-ClientHello-Grease-Compliance",
      "cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0",
      "X-HTTP2-Fingerprint",
      "2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p",
      "X-NGF-HTTP2-Fingerprint-Settings",
      "2:0;4:2097152;5:16384;6:16384",
      "X-NGF-HTTP2-Fingerprint-Window-Update",
      "5177345",
      "X-NGF-HTTP2-Fingerprint-Pseudo-Headers",
      "m,s,a,p",
      "X-NGF-HTTP2-First-Frame-Sequence",
      "4,8,1",
      "X-NGF-HTTP2-HPACK-Indexing-Summary",
      "size_updates=0;dynamic_refs=0;incremental=4",
      "X-NGF-Connection",
      "112467",
      "X-NGF-Connection-Requests",
      "1",
      "X-NGF-Request-Time",
      "0.000",
      "X-NGF-Request-Length",
      "123",
      "X-NGF-HTTP-Socket-TCP-RTT",
      "212295",
      "X-NGF-HTTP-Socket-TCP-Min-RTT",
      "212245",
      "X-NGF-HTTP-Socket-TCP-Retransmits",
      "0",
      "X-NGF-HTTP-Socket-TCP-Total-Retrans",
      "0",
      "X-NGF-HTTP-Socket-TCP-Delivery-Rate",
      "27187",
      "X-NGF-HTTP-Socket-TCP-Congestion",
      "cubic",
      "X-NGF-HTTP-Socket-TCP-Options-Text",
      "TIMESTAMPS,SACK,WSCALE",
      "X-NGF-HTTP-Socket-TCP-Rcv-MSS",
      "536",
      "X-NGF-HTTP-Socket-TCP-Snd-MSS",
      "1448",
      "X-NGF-Client-Protocol",
      "HTTP/2.0",
      "X-NGF-Client-IP",
      "216.73.216.52",
      "X-NGF-Client-Remote-Port",
      "63095",
      "X-NGF-Server-Local-Port",
      "443",
      "X-JA3",
      "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0",
      "X-JA3-Hash",
      "4aef5fa3a53d4fcd83c0b1722d714b16",
      "X-JA4",
      "t13d1011_61a7ad8aa9b6_d0f89c11dd05",
      "X-JA4H",
      "ge20n04_be74ea4f9dce",
      "X-JA4-One",
      "t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_",
      "X-JA4-TCP",
      "62727_2-4-8-1-3_1460_7",
      "X-JA4S",
      "h220_02_c9816e0798f9_2097152_5242880_0",
      "X-NGF-HTTP-SSL-JA3-Greased",
      "0",
      "X-NGF-HTTP-SSL-JA4TCP-Window",
      "62727",
      "X-NGF-HTTP-SSL-JA4TCP-Options-Text",
      "MSS,SACK,TS,NOP,WS",
      "X-NGF-HTTP-SSL-JA4TCP-MSS",
      "1460",
      "X-NGF-HTTP-SSL-JA4TCP-Window-Scale",
      "7",
      "X-NGF-HTTP-SSL-JA3-Version",
      "771",
      "X-NGF-HTTP-SSL-JA3-Ciphers",
      "4866-4865-4867-49196-49195-52393-49200-49199-52392-255",
      "X-NGF-HTTP-SSL-JA3-Extensions",
      "23-13-45-43-35-51-10-0-16-11-5",
      "X-NGF-HTTP-SSL-JA3-Curves",
      "29-23-24",
      "X-NGF-HTTP-SSL-JA3-Point-Formats",
      "0",
      "X-NGF-HTTP-ClientHello-Raw-Len",
      "192",
      "X-NGF-HTTP-ClientHello-Raw-SHA256",
      "47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5",
      "X-NGF-HTTP-ClientHello-Legacy-Version",
      "771",
      "X-NGF-HTTP-ClientHello-Cipher-Count",
      "10",
      "X-NGF-HTTP-ClientHello-Cipher-Count-NoGrease",
      "10",
      "X-NGF-HTTP-ClientHello-Extension-Count",
      "11",
      "X-NGF-HTTP-ClientHello-Extension-Count-NoGrease",
      "11",
      "X-NGF-HTTP-ClientHello-Extension-Order-Raw",
      "23-13-45-43-35-51-10-0-16-11-5",
      "X-NGF-HTTP-ClientHello-Extension-Order-NoGrease",
      "23-13-45-43-35-51-10-0-16-11-5",
      "X-NGF-HTTP-ClientHello-Supported-Versions",
      "772-771",
      "X-NGF-HTTP-ClientHello-Supported-Versions-Order",
      "772-771",
      "X-NGF-HTTP-ClientHello-Signature-Algorithms",
      "1283-1027-2055-2054-2053-2052-1537-1281-1025",
      "X-NGF-HTTP-ClientHello-Supported-Groups",
      "29-23-24",
      "X-NGF-HTTP-ClientHello-Key-Share-Groups",
      "29",
      "X-NGF-HTTP-ClientHello-ALPN",
      "h2,http/1.1",
      "X-NGF-HTTP-ClientHello-SNI",
      "tlsfinger.kdns.fr",
      "X-NGF-HTTP-ClientHello-Session-Resumption-Hint",
      "session_ticket",
      "X-NGF-HTTP-ClientHello-Grease-Compliance",
      "cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0",
      "X-HTTP2-Fingerprint",
      "2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p",
      "X-NGF-HTTP2-Fingerprint-Settings",
      "2:0;4:2097152;5:16384;6:16384",
      "X-NGF-HTTP2-Fingerprint-Window-Update",
      "5177345",
      "X-NGF-HTTP2-Fingerprint-Pseudo-Headers",
      "m,s,a,p",
      "X-NGF-HTTP2-First-Frame-Sequence",
      "4,8,1",
      "X-NGF-HTTP2-HPACK-Indexing-Summary",
      "size_updates=0;dynamic_refs=0;incremental=4",
      "X-NGF-Connection",
      "112467",
      "X-NGF-Connection-Requests",
      "1",
      "X-NGF-Request-Time",
      "0.000",
      "X-NGF-Request-Length",
      "123",
      "X-NGF-HTTP-Socket-TCP-RTT",
      "212295",
      "X-NGF-HTTP-Socket-TCP-Min-RTT",
      "212245",
      "X-NGF-HTTP-Socket-TCP-Retransmits",
      "0",
      "X-NGF-HTTP-Socket-TCP-Total-Retrans",
      "0",
      "X-NGF-HTTP-Socket-TCP-Delivery-Rate",
      "27187",
      "X-NGF-HTTP-Socket-TCP-Congestion",
      "cubic",
      "X-NGF-HTTP-Socket-TCP-Options-Text",
      "TIMESTAMPS,SACK,WSCALE",
      "X-NGF-HTTP-Socket-TCP-Rcv-MSS",
      "536",
      "X-NGF-HTTP-Socket-TCP-Snd-MSS",
      "1448",
      "accept",
      "*/*",
      "user-agent",
      "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
      "accept-encoding",
      "gzip, br, zstd, deflate"
    ],
    "headerOrder": [
      "host",
      "x-real-ip",
      "x-forwarded-for",
      "x-forwarded-proto",
      "x-ngf-client-protocol",
      "x-ngf-client-ip",
      "x-ngf-client-remote-port",
      "x-ngf-server-local-port",
      "x-ja3",
      "x-ja3-hash",
      "x-ja4",
      "x-ja4h",
      "x-ja4-one",
      "x-ja4-tcp",
      "x-ja4s",
      "x-ngf-http-ssl-ja3-greased",
      "x-ngf-http-ssl-ja4tcp-window",
      "x-ngf-http-ssl-ja4tcp-options-text",
      "x-ngf-http-ssl-ja4tcp-mss",
      "x-ngf-http-ssl-ja4tcp-window-scale",
      "x-ngf-http-ssl-ja3-version",
      "x-ngf-http-ssl-ja3-ciphers",
      "x-ngf-http-ssl-ja3-extensions",
      "x-ngf-http-ssl-ja3-curves",
      "x-ngf-http-ssl-ja3-point-formats",
      "x-ngf-http-clienthello-raw-len",
      "x-ngf-http-clienthello-raw-sha256",
      "x-ngf-http-clienthello-legacy-version",
      "x-ngf-http-clienthello-cipher-count",
      "x-ngf-http-clienthello-cipher-count-nogrease",
      "x-ngf-http-clienthello-extension-count",
      "x-ngf-http-clienthello-extension-count-nogrease",
      "x-ngf-http-clienthello-extension-order-raw",
      "x-ngf-http-clienthello-extension-order-nogrease",
      "x-ngf-http-clienthello-supported-versions",
      "x-ngf-http-clienthello-supported-versions-order",
      "x-ngf-http-clienthello-signature-algorithms",
      "x-ngf-http-clienthello-supported-groups",
      "x-ngf-http-clienthello-key-share-groups",
      "x-ngf-http-clienthello-alpn",
      "x-ngf-http-clienthello-sni",
      "x-ngf-http-clienthello-session-resumption-hint",
      "x-ngf-http-clienthello-grease-compliance",
      "x-http2-fingerprint",
      "x-ngf-http2-fingerprint-settings",
      "x-ngf-http2-fingerprint-window-update",
      "x-ngf-http2-fingerprint-pseudo-headers",
      "x-ngf-http2-first-frame-sequence",
      "x-ngf-http2-hpack-indexing-summary",
      "x-ngf-connection",
      "x-ngf-connection-requests",
      "x-ngf-request-time",
      "x-ngf-request-length",
      "x-ngf-http-socket-tcp-rtt",
      "x-ngf-http-socket-tcp-min-rtt",
      "x-ngf-http-socket-tcp-retransmits",
      "x-ngf-http-socket-tcp-total-retrans",
      "x-ngf-http-socket-tcp-delivery-rate",
      "x-ngf-http-socket-tcp-congestion",
      "x-ngf-http-socket-tcp-options-text",
      "x-ngf-http-socket-tcp-rcv-mss",
      "x-ngf-http-socket-tcp-snd-mss",
      "x-ngf-client-protocol",
      "x-ngf-client-ip",
      "x-ngf-client-remote-port",
      "x-ngf-server-local-port",
      "x-ja3",
      "x-ja3-hash",
      "x-ja4",
      "x-ja4h",
      "x-ja4-one",
      "x-ja4-tcp",
      "x-ja4s",
      "x-ngf-http-ssl-ja3-greased",
      "x-ngf-http-ssl-ja4tcp-window",
      "x-ngf-http-ssl-ja4tcp-options-text",
      "x-ngf-http-ssl-ja4tcp-mss",
      "x-ngf-http-ssl-ja4tcp-window-scale",
      "x-ngf-http-ssl-ja3-version",
      "x-ngf-http-ssl-ja3-ciphers",
      "x-ngf-http-ssl-ja3-extensions",
      "x-ngf-http-ssl-ja3-curves",
      "x-ngf-http-ssl-ja3-point-formats",
      "x-ngf-http-clienthello-raw-len",
      "x-ngf-http-clienthello-raw-sha256",
      "x-ngf-http-clienthello-legacy-version",
      "x-ngf-http-clienthello-cipher-count",
      "x-ngf-http-clienthello-cipher-count-nogrease",
      "x-ngf-http-clienthello-extension-count",
      "x-ngf-http-clienthello-extension-count-nogrease",
      "x-ngf-http-clienthello-extension-order-raw",
      "x-ngf-http-clienthello-extension-order-nogrease",
      "x-ngf-http-clienthello-supported-versions",
      "x-ngf-http-clienthello-supported-versions-order",
      "x-ngf-http-clienthello-signature-algorithms",
      "x-ngf-http-clienthello-supported-groups",
      "x-ngf-http-clienthello-key-share-groups",
      "x-ngf-http-clienthello-alpn",
      "x-ngf-http-clienthello-sni",
      "x-ngf-http-clienthello-session-resumption-hint",
      "x-ngf-http-clienthello-grease-compliance",
      "x-http2-fingerprint",
      "x-ngf-http2-fingerprint-settings",
      "x-ngf-http2-fingerprint-window-update",
      "x-ngf-http2-fingerprint-pseudo-headers",
      "x-ngf-http2-first-frame-sequence",
      "x-ngf-http2-hpack-indexing-summary",
      "x-ngf-connection",
      "x-ngf-connection-requests",
      "x-ngf-request-time",
      "x-ngf-request-length",
      "x-ngf-http-socket-tcp-rtt",
      "x-ngf-http-socket-tcp-min-rtt",
      "x-ngf-http-socket-tcp-retransmits",
      "x-ngf-http-socket-tcp-total-retrans",
      "x-ngf-http-socket-tcp-delivery-rate",
      "x-ngf-http-socket-tcp-congestion",
      "x-ngf-http-socket-tcp-options-text",
      "x-ngf-http-socket-tcp-rcv-mss",
      "x-ngf-http-socket-tcp-snd-mss",
      "accept",
      "user-agent",
      "accept-encoding"
    ],
    "headerOrderHash": "4ddf63c16d567fa4744c2f71ea2f2a914b43afa90f3362205a3af76c634011bc",
    "headerValueHash": "c71cd85ae6ae965ade92811e1bc2d3aea765a372c31ffc13f09f43e231e7a3d7",
    "httpFingerprint": "a607ce83dae545654e76bdd5eb438496ac3a96471a80c6b5d92e4b6bd9b059f4",
    "clientConnection": {
      "remoteAddress": "216.73.216.52, 216.73.216.52",
      "remotePort": "63095, 63095",
      "serverPort": "443, 443",
      "forwardedFor": "216.73.216.52"
    },
    "headers": {
      "host": "tlsfinger.kdns.fr",
      "x-real-ip": "216.73.216.52",
      "x-forwarded-for": "216.73.216.52",
      "x-forwarded-proto": "https",
      "x-ngf-client-protocol": "HTTP/2.0, HTTP/2.0",
      "x-ngf-client-ip": "216.73.216.52, 216.73.216.52",
      "x-ngf-client-remote-port": "63095, 63095",
      "x-ngf-server-local-port": "443, 443",
      "x-ja3": "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0, 771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0",
      "x-ja3-hash": "4aef5fa3a53d4fcd83c0b1722d714b16, 4aef5fa3a53d4fcd83c0b1722d714b16",
      "x-ja4": "t13d1011_61a7ad8aa9b6_d0f89c11dd05, t13d1011_61a7ad8aa9b6_d0f89c11dd05",
      "x-ja4h": "ge20n04_be74ea4f9dce, ge20n04_be74ea4f9dce",
      "x-ja4-one": "t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_, t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_",
      "x-ja4-tcp": "62727_2-4-8-1-3_1460_7, 62727_2-4-8-1-3_1460_7",
      "x-ja4s": "h220_02_c9816e0798f9_2097152_5242880_0, h220_02_c9816e0798f9_2097152_5242880_0",
      "x-ngf-http-ssl-ja3-greased": "0, 0",
      "x-ngf-http-ssl-ja4tcp-window": "62727, 62727",
      "x-ngf-http-ssl-ja4tcp-options-text": "MSS,SACK,TS,NOP,WS, MSS,SACK,TS,NOP,WS",
      "x-ngf-http-ssl-ja4tcp-mss": "1460, 1460",
      "x-ngf-http-ssl-ja4tcp-window-scale": "7, 7",
      "x-ngf-http-ssl-ja3-version": "771, 771",
      "x-ngf-http-ssl-ja3-ciphers": "4866-4865-4867-49196-49195-52393-49200-49199-52392-255, 4866-4865-4867-49196-49195-52393-49200-49199-52392-255",
      "x-ngf-http-ssl-ja3-extensions": "23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5",
      "x-ngf-http-ssl-ja3-curves": "29-23-24, 29-23-24",
      "x-ngf-http-ssl-ja3-point-formats": "0, 0",
      "x-ngf-http-clienthello-raw-len": "192, 192",
      "x-ngf-http-clienthello-raw-sha256": "47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5, 47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5",
      "x-ngf-http-clienthello-legacy-version": "771, 771",
      "x-ngf-http-clienthello-cipher-count": "10, 10",
      "x-ngf-http-clienthello-cipher-count-nogrease": "10, 10",
      "x-ngf-http-clienthello-extension-count": "11, 11",
      "x-ngf-http-clienthello-extension-count-nogrease": "11, 11",
      "x-ngf-http-clienthello-extension-order-raw": "23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5",
      "x-ngf-http-clienthello-extension-order-nogrease": "23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5",
      "x-ngf-http-clienthello-supported-versions": "772-771, 772-771",
      "x-ngf-http-clienthello-supported-versions-order": "772-771, 772-771",
      "x-ngf-http-clienthello-signature-algorithms": "1283-1027-2055-2054-2053-2052-1537-1281-1025, 1283-1027-2055-2054-2053-2052-1537-1281-1025",
      "x-ngf-http-clienthello-supported-groups": "29-23-24, 29-23-24",
      "x-ngf-http-clienthello-key-share-groups": "29, 29",
      "x-ngf-http-clienthello-alpn": "h2,http/1.1, h2,http/1.1",
      "x-ngf-http-clienthello-sni": "tlsfinger.kdns.fr, tlsfinger.kdns.fr",
      "x-ngf-http-clienthello-session-resumption-hint": "session_ticket, session_ticket",
      "x-ngf-http-clienthello-grease-compliance": "cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0, cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0",
      "x-http2-fingerprint": "2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p, 2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p",
      "x-ngf-http2-fingerprint-settings": "2:0;4:2097152;5:16384;6:16384, 2:0;4:2097152;5:16384;6:16384",
      "x-ngf-http2-fingerprint-window-update": "5177345, 5177345",
      "x-ngf-http2-fingerprint-pseudo-headers": "m,s,a,p, m,s,a,p",
      "x-ngf-http2-first-frame-sequence": "4,8,1, 4,8,1",
      "x-ngf-http2-hpack-indexing-summary": "size_updates=0;dynamic_refs=0;incremental=4, size_updates=0;dynamic_refs=0;incremental=4",
      "x-ngf-connection": "112467, 112467",
      "x-ngf-connection-requests": "1, 1",
      "x-ngf-request-time": "0.000, 0.000",
      "x-ngf-request-length": "123, 123",
      "x-ngf-http-socket-tcp-rtt": "212295, 212295",
      "x-ngf-http-socket-tcp-min-rtt": "212245, 212245",
      "x-ngf-http-socket-tcp-retransmits": "0, 0",
      "x-ngf-http-socket-tcp-total-retrans": "0, 0",
      "x-ngf-http-socket-tcp-delivery-rate": "27187, 27187",
      "x-ngf-http-socket-tcp-congestion": "cubic, cubic",
      "x-ngf-http-socket-tcp-options-text": "TIMESTAMPS,SACK,WSCALE, TIMESTAMPS,SACK,WSCALE",
      "x-ngf-http-socket-tcp-rcv-mss": "536, 536",
      "x-ngf-http-socket-tcp-snd-mss": "1448, 1448",
      "accept": "*/*",
      "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
      "accept-encoding": "gzip, br, zstd, deflate"
    },
    "selectedHeaders": {
      "host": "tlsfinger.kdns.fr",
      "connection": "",
      "upgradeInsecureRequests": "",
      "userAgent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
      "accept": "*/*",
      "acceptLanguage": "",
      "acceptEncoding": "gzip, br, zstd, deflate",
      "secChUa": "",
      "secChUaMobile": "",
      "secChUaPlatform": "",
      "secFetchSite": "",
      "secFetchMode": "",
      "secFetchDest": "",
      "cookiePresent": false
    },
    "gateway": {
      "clientProtocol": "HTTP/2.0, HTTP/2.0",
      "clientIp": "216.73.216.52, 216.73.216.52",
      "clientRemotePort": "63095, 63095",
      "serverLocalPort": "443, 443",
      "ja3": "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0, 771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0",
      "ja3Hash": "4aef5fa3a53d4fcd83c0b1722d714b16, 4aef5fa3a53d4fcd83c0b1722d714b16",
      "ja3Greased": "0, 0",
      "ja4": "t13d1011_61a7ad8aa9b6_d0f89c11dd05, t13d1011_61a7ad8aa9b6_d0f89c11dd05",
      "ja4h": "ge20n04_be74ea4f9dce, ge20n04_be74ea4f9dce",
      "ja4one": "t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_, t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_",
      "ja4tcp": "62727_2-4-8-1-3_1460_7, 62727_2-4-8-1-3_1460_7",
      "ja4tcpWindow": "62727, 62727",
      "ja4tcpOptionsText": "MSS,SACK,TS,NOP,WS, MSS,SACK,TS,NOP,WS",
      "ja4tcpMss": "1460, 1460",
      "ja4tcpWindowScale": "7, 7",
      "ja4s": "h220_02_c9816e0798f9_2097152_5242880_0, h220_02_c9816e0798f9_2097152_5242880_0",
      "ja3Version": "771, 771",
      "ja3Ciphers": "4866-4865-4867-49196-49195-52393-49200-49199-52392-255, 4866-4865-4867-49196-49195-52393-49200-49199-52392-255",
      "ja3Extensions": "23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5",
      "ja3Curves": "29-23-24, 29-23-24",
      "ja3PointFormats": "0, 0",
      "clienthelloRawLen": "192, 192",
      "clienthelloRawSha256": "47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5, 47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5",
      "clienthelloLegacyVersion": "771, 771",
      "clienthelloCipherCount": "10, 10",
      "clienthelloCipherCountNoGrease": "10, 10",
      "clienthelloExtensionCount": "11, 11",
      "clienthelloExtensionCountNoGrease": "11, 11",
      "clienthelloExtensionOrderRaw": "23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5",
      "clienthelloExtensionOrderNoGrease": "23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5",
      "clienthelloSupportedVersions": "772-771, 772-771",
      "clienthelloSupportedVersionsOrder": "772-771, 772-771",
      "clienthelloSignatureAlgorithms": "1283-1027-2055-2054-2053-2052-1537-1281-1025, 1283-1027-2055-2054-2053-2052-1537-1281-1025",
      "clienthelloSupportedGroups": "29-23-24, 29-23-24",
      "clienthelloKeyShareGroups": "29, 29",
      "clienthelloAlpn": "h2,http/1.1, h2,http/1.1",
      "clienthelloSni": "tlsfinger.kdns.fr, tlsfinger.kdns.fr",
      "clienthelloSessionResumptionHint": "session_ticket, session_ticket",
      "clienthelloGreaseCompliance": "cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0, cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0",
      "http2Fingerprint": "2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p, 2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p",
      "http2FingerprintSettings": "2:0;4:2097152;5:16384;6:16384, 2:0;4:2097152;5:16384;6:16384",
      "http2FingerprintWindowUpdate": "5177345, 5177345",
      "http2FingerprintPseudoHeaders": "m,s,a,p, m,s,a,p",
      "http2FirstFrameSequence": "4,8,1, 4,8,1",
      "http2HpackIndexingSummary": "size_updates=0;dynamic_refs=0;incremental=4, size_updates=0;dynamic_refs=0;incremental=4",
      "connection": "112467, 112467",
      "connectionRequests": "1, 1",
      "requestTime": "0.000, 0.000",
      "requestLength": "123, 123",
      "socketTcpRtt": "212295, 212295",
      "socketTcpMinRtt": "212245, 212245",
      "socketTcpRetransmits": "0, 0",
      "socketTcpTotalRetrans": "0, 0",
      "socketTcpDeliveryRate": "27187, 27187",
      "socketTcpCongestion": "cubic, cubic",
      "socketTcpOptionsText": "TIMESTAMPS,SACK,WSCALE, TIMESTAMPS,SACK,WSCALE",
      "socketTcpRcvMss": "536, 536",
      "socketTcpSndMss": "1448, 1448"
    },
    "forwardedFingerprintHeaders": {
      "x-ngf-client-protocol": "HTTP/2.0, HTTP/2.0",
      "x-ngf-client-ip": "216.73.216.52, 216.73.216.52",
      "x-ngf-client-remote-port": "63095, 63095",
      "x-ngf-server-local-port": "443, 443",
      "x-ja3": "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0, 771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-45-43-35-51-10-0-16-11-5,29-23-24,0",
      "x-ja3-hash": "4aef5fa3a53d4fcd83c0b1722d714b16, 4aef5fa3a53d4fcd83c0b1722d714b16",
      "x-ja4": "t13d1011_61a7ad8aa9b6_d0f89c11dd05, t13d1011_61a7ad8aa9b6_d0f89c11dd05",
      "x-ja4h": "ge20n04_be74ea4f9dce, ge20n04_be74ea4f9dce",
      "x-ja4-one": "t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_, t13d1011_61a7ad8aa9b6fb57f042e339a295ab44ffebcba574c81ec61a870a8d2b93d825_d0f89c11dd05687fec12824ae925cb0eab022b70a29314685ae02378660e0093_78660e0093_",
      "x-ja4-tcp": "62727_2-4-8-1-3_1460_7, 62727_2-4-8-1-3_1460_7",
      "x-ja4s": "h220_02_c9816e0798f9_2097152_5242880_0, h220_02_c9816e0798f9_2097152_5242880_0",
      "x-ngf-http-ssl-ja3-greased": "0, 0",
      "x-ngf-http-ssl-ja4tcp-window": "62727, 62727",
      "x-ngf-http-ssl-ja4tcp-options-text": "MSS,SACK,TS,NOP,WS, MSS,SACK,TS,NOP,WS",
      "x-ngf-http-ssl-ja4tcp-mss": "1460, 1460",
      "x-ngf-http-ssl-ja4tcp-window-scale": "7, 7",
      "x-ngf-http-ssl-ja3-version": "771, 771",
      "x-ngf-http-ssl-ja3-ciphers": "4866-4865-4867-49196-49195-52393-49200-49199-52392-255, 4866-4865-4867-49196-49195-52393-49200-49199-52392-255",
      "x-ngf-http-ssl-ja3-extensions": "23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5",
      "x-ngf-http-ssl-ja3-curves": "29-23-24, 29-23-24",
      "x-ngf-http-ssl-ja3-point-formats": "0, 0",
      "x-ngf-http-clienthello-raw-len": "192, 192",
      "x-ngf-http-clienthello-raw-sha256": "47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5, 47cd75acd6aab0af7217e727983cc4d63687e39b696761353dcdaf25dc1666c5",
      "x-ngf-http-clienthello-legacy-version": "771, 771",
      "x-ngf-http-clienthello-cipher-count": "10, 10",
      "x-ngf-http-clienthello-cipher-count-nogrease": "10, 10",
      "x-ngf-http-clienthello-extension-count": "11, 11",
      "x-ngf-http-clienthello-extension-count-nogrease": "11, 11",
      "x-ngf-http-clienthello-extension-order-raw": "23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5",
      "x-ngf-http-clienthello-extension-order-nogrease": "23-13-45-43-35-51-10-0-16-11-5, 23-13-45-43-35-51-10-0-16-11-5",
      "x-ngf-http-clienthello-supported-versions": "772-771, 772-771",
      "x-ngf-http-clienthello-supported-versions-order": "772-771, 772-771",
      "x-ngf-http-clienthello-signature-algorithms": "1283-1027-2055-2054-2053-2052-1537-1281-1025, 1283-1027-2055-2054-2053-2052-1537-1281-1025",
      "x-ngf-http-clienthello-supported-groups": "29-23-24, 29-23-24",
      "x-ngf-http-clienthello-key-share-groups": "29, 29",
      "x-ngf-http-clienthello-alpn": "h2,http/1.1, h2,http/1.1",
      "x-ngf-http-clienthello-sni": "tlsfinger.kdns.fr, tlsfinger.kdns.fr",
      "x-ngf-http-clienthello-session-resumption-hint": "session_ticket, session_ticket",
      "x-ngf-http-clienthello-grease-compliance": "cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0, cipher_count:0,cipher_first_pos:0,ext_count:0,ext_dup:0,curve_count:0",
      "x-http2-fingerprint": "2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p, 2:0;4:2097152;5:16384;6:16384|5177345|1:0:0:16|m,s,a,p",
      "x-ngf-http2-fingerprint-settings": "2:0;4:2097152;5:16384;6:16384, 2:0;4:2097152;5:16384;6:16384",
      "x-ngf-http2-fingerprint-window-update": "5177345, 5177345",
      "x-ngf-http2-fingerprint-pseudo-headers": "m,s,a,p, m,s,a,p",
      "x-ngf-http2-first-frame-sequence": "4,8,1, 4,8,1",
      "x-ngf-http2-hpack-indexing-summary": "size_updates=0;dynamic_refs=0;incremental=4, size_updates=0;dynamic_refs=0;incremental=4",
      "x-ngf-connection": "112467, 112467",
      "x-ngf-connection-requests": "1, 1",
      "x-ngf-request-time": "0.000, 0.000",
      "x-ngf-request-length": "123, 123",
      "x-ngf-http-socket-tcp-rtt": "212295, 212295",
      "x-ngf-http-socket-tcp-min-rtt": "212245, 212245",
      "x-ngf-http-socket-tcp-retransmits": "0, 0",
      "x-ngf-http-socket-tcp-total-retrans": "0, 0",
      "x-ngf-http-socket-tcp-delivery-rate": "27187, 27187",
      "x-ngf-http-socket-tcp-congestion": "cubic, cubic",
      "x-ngf-http-socket-tcp-options-text": "TIMESTAMPS,SACK,WSCALE, TIMESTAMPS,SACK,WSCALE",
      "x-ngf-http-socket-tcp-rcv-mss": "536, 536",
      "x-ngf-http-socket-tcp-snd-mss": "1448, 1448"
    },
    "risk": {
      "score": 40,
      "level": "suspicious",
      "reasons": [
        "Accept-Language missing",
        "Browser-like UA but Accept does not look like browser navigation",
        "Cookie header not present on this request"
      ]
    }
  }
}