← Home

Protocol detail for run 7f697a42b1a666e7 — DeepSeek

Server-observed TCP/TLS/H2/HTTP layers, joined per client. See results for the application-layer / self-reported view.

Drag the right edge of a column header to resize it (tables can grow past the screen -- scroll horizontally). Each table has Copy/Download TSV buttons above it.

Delete this run

Showing all clients. Show only AI agents

Connection comparison

TLS/H2/TCP fingerprint per client, with your own browser (the request that loaded this page) pinned at top for reference.

User-AgentReqsConnsJA4TLSCipherALPNGREASEECHH2 FPRTTProxy hdrs
Your browser (viewing this page)--t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3TLS 1.3TLS_AES_128_GCM_SHA256h2falsefalse2:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p40.3ms-
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36171t13d1518h2_8daaf6152771_e2d80978ab2eTLS 1.3TLS_AES_128_GCM_SHA256h2truetrue1:65536;2:0;4:6291456;6:262144|15663105|1:1:0:256|m,a,s,p40.4ms-
Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.011t13d1717h2_5b57614c22b0_3cbfd9057e0dTLS 1.3TLS_AES_128_GCM_SHA256h2falsetrue1:65536;2:0;4:131072;5:16384|12517377|3:0:0:42|m,p,a,s164.9ms-
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)33t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3TLS 1.3TLS_AES_128_GCM_SHA256h2falsefalse2:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p34.9ms-

Test results

Hover a cell for the raw outcome. FAIL means the probe was reached but the capability wasn't demonstrated (e.g. no conditional revalidation sent); "-" means the probe was never reached.

User-Agentimg_avifimg_jpegimg_pngimg_webp
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36PASSPASSPASSPASS
Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0----
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)----

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36

17 request(s)

TLS (per connection)

ConnJA4JA3JA3 hashSNIALPN offeredALPN negotiatedTLS negotiatedHighest offeredCipher negotiatedGREASEECHCipher suites offeredExtensions in orderSupported groupsSignature algorithms
#1t13d1518h2_8daaf6152771_e2d80978ab2e771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,65281-45-23-0-65037-18-51764-17613-11-35-5-13-27-43-10-16-51-41,4588-29-23-24,0068fb117e606e23998806225ca4c8d93ai-tester.paulcalvano.comh2, http/1.1h2TLS 1.3TLS 13TLS_AES_128_GCM_SHA256truetrueGREASE(0x0a0a), 0x1301 TLS_AES_128_GCM_SHA256, 0x1302 TLS_AES_256_GCM_SHA384, 0x1303 TLS_CHACHA20_POLY1305_SHA256, 0xc02b ECDHE_ECDSA_AES_128_GCM_SHA256, 0xc02f ECDHE_RSA_AES_128_GCM_SHA256, 0xc02c ECDHE_ECDSA_AES_256_GCM_SHA384, 0xc030 ECDHE_RSA_AES_256_GCM_SHA384, 0xcca9 ECDHE_ECDSA_CHACHA20_POLY1305, 0xcca8 ECDHE_RSA_CHACHA20_POLY1305, 0xc013 ECDHE_RSA_AES_128_CBC_SHA, 0xc014 ECDHE_RSA_AES_256_CBC_SHA, 0x009c RSA_AES_128_GCM_SHA256, 0x009d RSA_AES_256_GCM_SHA384, 0x002f RSA_AES_128_CBC_SHA, 0x0035 RSA_AES_256_CBC_SHAGREASE(0x1a1a), 0xff01 renegotiation_info, 0x002d psk_key_exchange_modes, 0x0017 extended_master_secret, 0x0000 server_name, 0xfe0d encrypted_client_hello, 0x0012 signed_cert_timestamp, 0xca34, 0x44cd, 0x000b ec_point_formats, 0x0023 session_ticket, 0x0005 status_request, 0x000d signature_algorithms, 0x001b compress_certificate, 0x002b supported_versions, 0x000a supported_groups, 0x0010 alpn, 0x0033 key_share, GREASE(0x8a8a), 0x0029 pre_shared_keyGREASE(0xbaba), 0x11ec X25519MLKEM768, 0x001d x25519, 0x0017 secp256r1, 0x0018 secp384r1GREASE(0x2a2a), 0x0904, 0x0905, 0x0906, 0x0403 ecdsa_secp256r1_sha256, 0x0804 rsa_pss_rsae_sha256, 0x0401 rsa_pkcs1_sha256, 0x0503 ecdsa_secp384r1_sha384, 0x0805 rsa_pss_rsae_sha384, 0x0501 rsa_pkcs1_sha384, 0x0806 rsa_pss_rsae_sha512, 0x0601 rsa_pkcs1_sha512

HTTP/2 (per connection)

ConnFingerprintPseudo-header orderHeader orderSETTINGSWindow updatePriority framesFirst frame types
#11:65536;2:0;4:6291456;6:262144|15663105|1:1:0:256|m,a,s,p:method,:authority,:scheme,:path:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityHEADER_TABLE_SIZE(1)=65536, ENABLE_PUSH(2)=0, INITIAL_WINDOW_SIZE(4)=6291456, MAX_HEADER_LIST_SIZE(6)=262144156631051:1:0:256SETTINGS, WINDOW_UPDATE, HEADERS, SETTINGS

TCP (per connection)

ConnRTTRTT varSnd MSSRcv MSSAdv MSSCwndRcv spaceRetransmitsTotal retransLost
#140.4ms1.8ms1408140814081514080000

Packet / SYN (from pcap)

TTL, initial window and MSS come from the raw SYN packet -- the one layer a proxy fleet can't easily disguise, since it describes the kernel that opened the socket. Best-effort: requires a capture covering this connection's timestamp.

ConnTTLWindow sizeMSSWindow scaleSACK permittedFingerprintPcap file
#1606553514606true60:65535:1460:6syn-20260914-115224.pcap

Download raw capture: syn-20260914-115224.pcap

No self-report from this client. If it couldn't call /report itself, you can file one manually on its behalf.

Test summary

ProbeWhat it testsOutcomes observedCount
img_avifImage format: AVIF image -- tests whether the fetcher can decode it.fetched1
img_jpegImage format: JPEG control image; the embedded number proves the bytes were decoded.fetched1
img_pngImage format: PNG control image; the embedded number proves the bytes were decoded.fetched1
img_webpImage format: WebP image -- tests whether the fetcher can decode it.fetched1

Requests

Response headers are what the handler explicitly set. Content-Length and Date are added by Go's HTTP stack directly to the wire afterward and never pass back through the header map, so they don't appear here -- see Bytes for the actual byte count.

TimeMethodPathProtoStatusAcceptAccept-EncodingServed enc.BytesDurationHeader orderResponse headers
12:10:01.967GET/t/7f697a42b1a666e7/HTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd69061ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
12:10:02.046GET/t/7f697a42b1a666e7/i/0df2dcbd1d1b2f2dHTTP/2.0200image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8gzip, deflate, br, zstd6910ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Length: 691; Content-Type: image/avif
12:10:02.048GET/t/7f697a42b1a666e7/i/5241e20dbecd4623HTTP/2.0200image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8gzip, deflate, br, zstd6600ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Length: 660; Content-Type: image/webp
12:10:02.049GET/t/7f697a42b1a666e7/i/343a8772cf17efbfHTTP/2.0200image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8gzip, deflate, br, zstd58231ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Length: 5823; Content-Type: image/jpeg
12:10:02.052GET/t/7f697a42b1a666e7/i/8060abd40a2d1a41HTTP/2.0200image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8gzip, deflate, br, zstd15490ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Length: 1549; Content-Type: image/png
12:10:52.060GET/t/7f697a42b1a666e7/resultsHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd37940ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
12:10:57.994GET/t/7f697a42b1a666e7/resultsHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd37940ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
12:11:20.639GET/t/7f697a42b1a666e7/resultsHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd37940ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
12:11:21.917GET/t/7f697a42b1a666e7/resultsHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd37950ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
12:11:56.661GET/t/7f697a42b1a666e7/resultsHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd37960ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
12:12:07.021GET/t/7f697a42b1a666e7/resultsHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd37960ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
12:12:18.114GET/t/7f697a42b1a666e7/detailHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd538514ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
12:12:21.238GET/t/7f697a42b1a666e7/detail?all=1HTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd31376689ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
12:13:18.398GET/t/7f697a42b1a666e7/detailHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd538514ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
12:13:47.682GET/t/7f697a42b1a666e7/detailHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd538514ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
12:13:51.076GET/t/7f697a42b1a666e7/resultsHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd37960ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
12:13:52.805GET/t/7f697a42b1a666e7/resultsHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd37960ms:method, :authority, :scheme, :path, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
Raw event log (4 observations)
TimeProbeDetail
12:10:02.046img_avif:fetchednumber=4018 bytes=691 accept="image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8"
12:10:02.048img_webp:fetchednumber=3018 bytes=660 accept="image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8"
12:10:02.048img_jpeg:fetchednumber=2018 bytes=5823 accept="image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8"
12:10:02.052img_png:fetchednumber=1018 bytes=1549 accept="image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8"

Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0

1 request(s)

TLS (per connection)

ConnJA4JA3JA3 hashSNIALPN offeredALPN negotiatedTLS negotiatedHighest offeredCipher negotiatedGREASEECHCipher suites offeredExtensions in orderSupported groupsSignature algorithms
#1t13d1717h2_5b57614c22b0_3cbfd9057e0d771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-156-157-47-53,0-23-65281-10-11-35-16-5-34-18-51-43-13-45-28-27-65037,4588-29-23-24-25-256-257,06f7889b9fb1a62a9577e685c1fcfa919ai-tester.paulcalvano.comh2, http/1.1h2TLS 1.3TLS 13TLS_AES_128_GCM_SHA256falsetrue0x1301 TLS_AES_128_GCM_SHA256, 0x1303 TLS_CHACHA20_POLY1305_SHA256, 0x1302 TLS_AES_256_GCM_SHA384, 0xc02b ECDHE_ECDSA_AES_128_GCM_SHA256, 0xc02f ECDHE_RSA_AES_128_GCM_SHA256, 0xcca9 ECDHE_ECDSA_CHACHA20_POLY1305, 0xcca8 ECDHE_RSA_CHACHA20_POLY1305, 0xc02c ECDHE_ECDSA_AES_256_GCM_SHA384, 0xc030 ECDHE_RSA_AES_256_GCM_SHA384, 0xc00a ECDHE_ECDSA_AES_256_CBC_SHA, 0xc009 ECDHE_ECDSA_AES_128_CBC_SHA, 0xc013 ECDHE_RSA_AES_128_CBC_SHA, 0xc014 ECDHE_RSA_AES_256_CBC_SHA, 0x009c RSA_AES_128_GCM_SHA256, 0x009d RSA_AES_256_GCM_SHA384, 0x002f RSA_AES_128_CBC_SHA, 0x0035 RSA_AES_256_CBC_SHA0x0000 server_name, 0x0017 extended_master_secret, 0xff01 renegotiation_info, 0x000a supported_groups, 0x000b ec_point_formats, 0x0023 session_ticket, 0x0010 alpn, 0x0005 status_request, 0x0022, 0x0012 signed_cert_timestamp, 0x0033 key_share, 0x002b supported_versions, 0x000d signature_algorithms, 0x002d psk_key_exchange_modes, 0x001c record_size_limit, 0x001b compress_certificate, 0xfe0d encrypted_client_hello0x11ec X25519MLKEM768, 0x001d x25519, 0x0017 secp256r1, 0x0018 secp384r1, 0x0019 secp521r1, 0x0100 ffdhe2048, 0x0101 ffdhe30720x0403 ecdsa_secp256r1_sha256, 0x0503 ecdsa_secp384r1_sha384, 0x0603 ecdsa_secp521r1_sha512, 0x0804 rsa_pss_rsae_sha256, 0x0805 rsa_pss_rsae_sha384, 0x0806 rsa_pss_rsae_sha512, 0x0401 rsa_pkcs1_sha256, 0x0501 rsa_pkcs1_sha384, 0x0601 rsa_pkcs1_sha512, 0x0203 ecdsa_sha1, 0x0201 rsa_pkcs1_sha1

HTTP/2 (per connection)

ConnFingerprintPseudo-header orderHeader orderSETTINGSWindow updatePriority framesFirst frame types
#11:65536;2:0;4:131072;5:16384|12517377|3:0:0:42|m,p,a,s:method,:path,:authority,:scheme:method, :path, :authority, :scheme, user-agent, accept, accept-language, accept-encoding, upgrade-insecure-requests, sec-fetch-dest, sec-fetch-mode, sec-fetch-site, sec-fetch-user, priority, teHEADER_TABLE_SIZE(1)=65536, ENABLE_PUSH(2)=0, INITIAL_WINDOW_SIZE(4)=131072, MAX_FRAME_SIZE(5)=16384125173773:0:0:42SETTINGS, WINDOW_UPDATE, HEADERS, WINDOW_UPDATE

TCP (per connection)

ConnRTTRTT varSnd MSSRcv MSSAdv MSSCwndRcv spaceRetransmitsTotal retransLost
#1164.9ms34.9ms1408140814081014080000

Packet / SYN (from pcap)

TTL, initial window and MSS come from the raw SYN packet -- the one layer a proxy fleet can't easily disguise, since it describes the kernel that opened the socket. Best-effort: requires a capture covering this connection's timestamp.

ConnTTLWindow sizeMSSWindow scaleSACK permittedFingerprintPcap file
#1566424014607true56:64240:1460:7syn-20260914-115224.pcap

Download raw capture: syn-20260914-115224.pcap

No self-report from this client. If it couldn't call /report itself, you can file one manually on its behalf.

Requests

Response headers are what the handler explicitly set. Content-Length and Date are added by Go's HTTP stack directly to the wire afterward and never pass back through the header map, so they don't appear here -- see Bytes for the actual byte count.

TimeMethodPathProtoStatusAcceptAccept-EncodingServed enc.BytesDurationHeader orderResponse headers
12:10:32.989GET/t/7f697a42b1a666e7/HTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8gzip, deflate, br, zstd69061ms:method, :path, :authority, :scheme, user-agent, accept, accept-language, accept-encoding, upgrade-insecure-requests, sec-fetch-dest, sec-fetch-mode, sec-fetch-site, sec-fetch-user, priority, teCache-Control: no-store; Content-Type: text/html; charset=utf-8

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)

3 request(s)

TLS (per connection)

ConnJA4JA3JA3 hashSNIALPN offeredALPN negotiatedTLS negotiatedHighest offeredCipher negotiatedGREASEECHCipher suites offeredExtensions in orderSupported groupsSignature algorithms
#1t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,35-11-45-10-13-23-43-16-0-51-5,29-23-24,086e8b43e4dda0ef63ac48bdc362bf32bai-tester.paulcalvano.comh2, http/1.1h2TLS 1.3TLS 13TLS_AES_128_GCM_SHA256falsefalse0x1302 TLS_AES_256_GCM_SHA384, 0x1301 TLS_AES_128_GCM_SHA256, 0x1303 TLS_CHACHA20_POLY1305_SHA256, 0xc02c ECDHE_ECDSA_AES_256_GCM_SHA384, 0xc02b ECDHE_ECDSA_AES_128_GCM_SHA256, 0xcca9 ECDHE_ECDSA_CHACHA20_POLY1305, 0xc030 ECDHE_RSA_AES_256_GCM_SHA384, 0xc02f ECDHE_RSA_AES_128_GCM_SHA256, 0xcca8 ECDHE_RSA_CHACHA20_POLY1305, 0x00ff0x0023 session_ticket, 0x000b ec_point_formats, 0x002d psk_key_exchange_modes, 0x000a supported_groups, 0x000d signature_algorithms, 0x0017 extended_master_secret, 0x002b supported_versions, 0x0010 alpn, 0x0000 server_name, 0x0033 key_share, 0x0005 status_request0x001d x25519, 0x0017 secp256r1, 0x0018 secp384r10x0503 ecdsa_secp384r1_sha384, 0x0403 ecdsa_secp256r1_sha256, 0x0807, 0x0806 rsa_pss_rsae_sha512, 0x0805 rsa_pss_rsae_sha384, 0x0804 rsa_pss_rsae_sha256, 0x0601 rsa_pkcs1_sha512, 0x0501 rsa_pkcs1_sha384, 0x0401 rsa_pkcs1_sha256
#2t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,13-5-10-35-0-43-23-11-51-45-16,29-23-24,0c0fe969766f6d5d613b2526baf9f0677ai-tester.paulcalvano.comh2, http/1.1h2TLS 1.3TLS 13TLS_AES_128_GCM_SHA256falsefalse0x1302 TLS_AES_256_GCM_SHA384, 0x1301 TLS_AES_128_GCM_SHA256, 0x1303 TLS_CHACHA20_POLY1305_SHA256, 0xc02c ECDHE_ECDSA_AES_256_GCM_SHA384, 0xc02b ECDHE_ECDSA_AES_128_GCM_SHA256, 0xcca9 ECDHE_ECDSA_CHACHA20_POLY1305, 0xc030 ECDHE_RSA_AES_256_GCM_SHA384, 0xc02f ECDHE_RSA_AES_128_GCM_SHA256, 0xcca8 ECDHE_RSA_CHACHA20_POLY1305, 0x00ff0x000d signature_algorithms, 0x0005 status_request, 0x000a supported_groups, 0x0023 session_ticket, 0x0000 server_name, 0x002b supported_versions, 0x0017 extended_master_secret, 0x000b ec_point_formats, 0x0033 key_share, 0x002d psk_key_exchange_modes, 0x0010 alpn0x001d x25519, 0x0017 secp256r1, 0x0018 secp384r10x0503 ecdsa_secp384r1_sha384, 0x0403 ecdsa_secp256r1_sha256, 0x0807, 0x0806 rsa_pss_rsae_sha512, 0x0805 rsa_pss_rsae_sha384, 0x0804 rsa_pss_rsae_sha256, 0x0601 rsa_pkcs1_sha512, 0x0501 rsa_pkcs1_sha384, 0x0401 rsa_pkcs1_sha256
#3t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,23-13-43-45-0-5-11-10-51-35-16,29-23-24,081904354fbbb21bb536fece3422cef3aai-tester.paulcalvano.comh2, http/1.1h2TLS 1.3TLS 13TLS_AES_128_GCM_SHA256falsefalse0x1302 TLS_AES_256_GCM_SHA384, 0x1301 TLS_AES_128_GCM_SHA256, 0x1303 TLS_CHACHA20_POLY1305_SHA256, 0xc02c ECDHE_ECDSA_AES_256_GCM_SHA384, 0xc02b ECDHE_ECDSA_AES_128_GCM_SHA256, 0xcca9 ECDHE_ECDSA_CHACHA20_POLY1305, 0xc030 ECDHE_RSA_AES_256_GCM_SHA384, 0xc02f ECDHE_RSA_AES_128_GCM_SHA256, 0xcca8 ECDHE_RSA_CHACHA20_POLY1305, 0x00ff0x0017 extended_master_secret, 0x000d signature_algorithms, 0x002b supported_versions, 0x002d psk_key_exchange_modes, 0x0000 server_name, 0x0005 status_request, 0x000b ec_point_formats, 0x000a supported_groups, 0x0033 key_share, 0x0023 session_ticket, 0x0010 alpn0x001d x25519, 0x0017 secp256r1, 0x0018 secp384r10x0503 ecdsa_secp384r1_sha384, 0x0403 ecdsa_secp256r1_sha256, 0x0807, 0x0806 rsa_pss_rsae_sha512, 0x0805 rsa_pss_rsae_sha384, 0x0804 rsa_pss_rsae_sha256, 0x0601 rsa_pkcs1_sha512, 0x0501 rsa_pkcs1_sha384, 0x0401 rsa_pkcs1_sha256

HTTP/2 (per connection)

ConnFingerprintPseudo-header orderHeader orderSETTINGSWindow updatePriority framesFirst frame types
#12:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p:method,:scheme,:authority,:path:method, :scheme, :authority, :path, accept, user-agent, accept-encodingENABLE_PUSH(2)=0, INITIAL_WINDOW_SIZE(4)=2097152, MAX_FRAME_SIZE(5)=16384, MAX_HEADER_LIST_SIZE(6)=163845177345SETTINGS, WINDOW_UPDATE, HEADERS, SETTINGS, HEADERS
#22:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p:method,:scheme,:authority,:path:method, :scheme, :authority, :path, accept, user-agent, accept-encodingENABLE_PUSH(2)=0, INITIAL_WINDOW_SIZE(4)=2097152, MAX_FRAME_SIZE(5)=16384, MAX_HEADER_LIST_SIZE(6)=163845177345SETTINGS, WINDOW_UPDATE, HEADERS
#32:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p:method,:scheme,:authority,:path:method, :scheme, :authority, :path, accept, user-agent, accept-encodingENABLE_PUSH(2)=0, INITIAL_WINDOW_SIZE(4)=2097152, MAX_FRAME_SIZE(5)=16384, MAX_HEADER_LIST_SIZE(6)=163845177345SETTINGS, WINDOW_UPDATE, HEADERS

TCP (per connection)

ConnRTTRTT varSnd MSSRcv MSSAdv MSSCwndRcv spaceRetransmitsTotal retransLost
#134.9ms1.1ms140853614081314080000
#228.2ms8.1ms140853614081014080000
#341.0ms8.7ms140853614081014080000

Packet / SYN (from pcap)

TTL, initial window and MSS come from the raw SYN packet -- the one layer a proxy fleet can't easily disguise, since it describes the kernel that opened the socket. Best-effort: requires a capture covering this connection's timestamp.

ConnTTLWindow sizeMSSWindow scaleSACK permittedFingerprintPcap file
#11236272714607true123:62727:1460:7syn-20260914-151130.pcap
#21236272714607true123:62727:1460:7syn-20260914-151130.pcap
#31236272714607true123:62727:1460:7syn-20260914-151130.pcap

Download raw capture: syn-20260914-151130.pcap

No self-report from this client. If it couldn't call /report itself, you can file one manually on its behalf.

Requests

Response headers are what the handler explicitly set. Content-Length and Date are added by Go's HTTP stack directly to the wire afterward and never pass back through the header map, so they don't appear here -- see Bytes for the actual byte count.

TimeMethodPathProtoStatusAcceptAccept-EncodingServed enc.BytesDurationHeader orderResponse headers
15:23:28.281GET/t/7f697a42b1a666e7/detailHTTP/2.0200*/*gzip, br, zstd, deflate538542ms:method, :scheme, :authority, :path, accept, user-agent, accept-encodingCache-Control: no-store; Content-Type: text/html; charset=utf-8
15:25:14.202GET/t/7f697a42b1a666e7/deleteHTTP/2.0200*/*gzip, br, zstd, deflate13470ms:method, :scheme, :authority, :path, accept, user-agent, accept-encodingCache-Control: no-store; Content-Type: text/html; charset=utf-8
16:07:02.817GET/t/7f697a42b1a666e7/resultsHTTP/2.0200*/*gzip, br, zstd, deflate39400ms:method, :scheme, :authority, :path, accept, user-agent, accept-encodingCache-Control: no-store; Content-Type: text/html; charset=utf-8