← Home

Protocol detail for run 8ab5c2b9e265dbff — Perplexity

Server-observed TCP/TLS/H2/HTTP layers, joined per client. See results for the application-layer / self-reported view.

Drag the right edge of a column header to resize it (tables can grow past the screen -- scroll horizontally). Each table has Copy/Download TSV buttons above it.

Delete this run

Showing all clients. Show only AI agents

Connection comparison

TLS/H2/TCP fingerprint per client, with your own browser (the request that loaded this page) pinned at top for reference.

User-AgentReqsConnsJA4TLSCipherALPNGREASEECHH2 FPRTTProxy hdrs
Your browser (viewing this page)--t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3TLS 1.3TLS_AES_128_GCM_SHA256h2falsefalse2:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p34.4ms-
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36111t13d1518h2_8daaf6152771_e2d80978ab2eTLS 1.3TLS_AES_128_GCM_SHA256h2truetrue1:65536;2:0;4:6291456;6:262144|15663105|1:1:0:256|m,a,s,p34.3ms-
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)55t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3TLS 1.3TLS_AES_128_GCM_SHA256h2falsefalse2:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p30.0ms-

Test results

Hover a cell for the raw outcome. FAIL means the probe was reached but the capability wasn't demonstrated (e.g. no conditional revalidation sent); "-" means the probe was never reached.

User-Agentimg_avifimg_jpegimg_pngimg_webp
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36PASSPASSPASSPASS
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)----

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36

11 request(s)

TLS (per connection)

ConnJA4JA3JA3 hashSNIALPN offeredALPN negotiatedTLS negotiatedHighest offeredCipher negotiatedGREASEECHCipher suites offeredExtensions in orderSupported groupsSignature algorithms
#1t13d1518h2_8daaf6152771_e2d80978ab2e771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,27-65037-43-35-18-51-5-0-11-17613-13-51764-23-16-45-65281-10-41,4588-29-23-24,012b713453c612eb667d661fe350008feai-tester.paulcalvano.comh2, http/1.1h2TLS 1.3TLS 13TLS_AES_128_GCM_SHA256truetrueGREASE(0x0a0a), 0x1301 TLS_AES_128_GCM_SHA256, 0x1302 TLS_AES_256_GCM_SHA384, 0x1303 TLS_CHACHA20_POLY1305_SHA256, 0xc02b ECDHE_ECDSA_AES_128_GCM_SHA256, 0xc02f ECDHE_RSA_AES_128_GCM_SHA256, 0xc02c ECDHE_ECDSA_AES_256_GCM_SHA384, 0xc030 ECDHE_RSA_AES_256_GCM_SHA384, 0xcca9 ECDHE_ECDSA_CHACHA20_POLY1305, 0xcca8 ECDHE_RSA_CHACHA20_POLY1305, 0xc013 ECDHE_RSA_AES_128_CBC_SHA, 0xc014 ECDHE_RSA_AES_256_CBC_SHA, 0x009c RSA_AES_128_GCM_SHA256, 0x009d RSA_AES_256_GCM_SHA384, 0x002f RSA_AES_128_CBC_SHA, 0x0035 RSA_AES_256_CBC_SHAGREASE(0x0a0a), 0x001b compress_certificate, 0xfe0d encrypted_client_hello, 0x002b supported_versions, 0x0023 session_ticket, 0x0012 signed_cert_timestamp, 0x0033 key_share, 0x0005 status_request, 0x0000 server_name, 0x000b ec_point_formats, 0x44cd, 0x000d signature_algorithms, 0xca34, 0x0017 extended_master_secret, 0x0010 alpn, 0x002d psk_key_exchange_modes, 0xff01 renegotiation_info, 0x000a supported_groups, GREASE(0x7a7a), 0x0029 pre_shared_keyGREASE(0x5a5a), 0x11ec X25519MLKEM768, 0x001d x25519, 0x0017 secp256r1, 0x0018 secp384r1GREASE(0x0a0a), 0x0904, 0x0905, 0x0906, 0x0403 ecdsa_secp256r1_sha256, 0x0804 rsa_pss_rsae_sha256, 0x0401 rsa_pkcs1_sha256, 0x0503 ecdsa_secp384r1_sha384, 0x0805 rsa_pss_rsae_sha384, 0x0501 rsa_pkcs1_sha384, 0x0806 rsa_pss_rsae_sha512, 0x0601 rsa_pkcs1_sha512

HTTP/2 (per connection)

ConnFingerprintPseudo-header orderHeader orderSETTINGSWindow updatePriority framesFirst frame types
#11:65536;2:0;4:6291456;6:262144|15663105|1:1:0:256|m,a,s,p:method,:authority,:scheme,:path:method, :authority, :scheme, :path, cache-control, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityHEADER_TABLE_SIZE(1)=65536, ENABLE_PUSH(2)=0, INITIAL_WINDOW_SIZE(4)=6291456, MAX_HEADER_LIST_SIZE(6)=262144156631051:1:0:256SETTINGS, WINDOW_UPDATE, HEADERS

TCP (per connection)

ConnRTTRTT varSnd MSSRcv MSSAdv MSSCwndRcv spaceRetransmitsTotal retransLost
#134.3ms2.1ms1408140814081014080000

Packet / SYN (from pcap)

TTL, initial window and MSS come from the raw SYN packet -- the one layer a proxy fleet can't easily disguise, since it describes the kernel that opened the socket. Best-effort: requires a capture covering this connection's timestamp.

ConnTTLWindow sizeMSSWindow scaleSACK permittedFingerprintPcap file
#1606553514606true60:65535:1460:6syn-20260914-115224.pcap

Download raw capture: syn-20260914-115224.pcap

No self-report from this client. If it couldn't call /report itself, you can file one manually on its behalf.

Test summary

ProbeWhat it testsOutcomes observedCount
img_avifImage format: AVIF image -- tests whether the fetcher can decode it.fetched1
img_jpegImage format: JPEG control image; the embedded number proves the bytes were decoded.fetched1
img_pngImage format: PNG control image; the embedded number proves the bytes were decoded.fetched1
img_webpImage format: WebP image -- tests whether the fetcher can decode it.fetched1

Requests

Response headers are what the handler explicitly set. Content-Length and Date are added by Go's HTTP stack directly to the wire afterward and never pass back through the header map, so they don't appear here -- see Bytes for the actual byte count.

TimeMethodPathProtoStatusAcceptAccept-EncodingServed enc.BytesDurationHeader orderResponse headers
11:56:41.174GET/t/8ab5c2b9e265dbff/HTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd69060ms:method, :authority, :scheme, :path, cache-control, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
11:56:41.245GET/t/8ab5c2b9e265dbff/i/a451874c3ebe43f5HTTP/2.0200image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8gzip, deflate, br, zstd7360ms:method, :authority, :scheme, :path, cache-control, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Length: 736; Content-Type: image/avif
11:56:41.253GET/t/8ab5c2b9e265dbff/i/a696fbe386a4d11eHTTP/2.0200image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8gzip, deflate, br, zstd7260ms:method, :authority, :scheme, :path, cache-control, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Length: 726; Content-Type: image/webp
11:56:41.253GET/t/8ab5c2b9e265dbff/i/e205b1fd538f0091HTTP/2.0200image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8gzip, deflate, br, zstd15490ms:method, :authority, :scheme, :path, cache-control, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Length: 1549; Content-Type: image/png
11:56:41.253GET/t/8ab5c2b9e265dbff/i/d400753d8a4b27caHTTP/2.0200image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8gzip, deflate, br, zstd65200ms:method, :authority, :scheme, :path, cache-control, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Length: 6520; Content-Type: image/jpeg
11:57:37.642GET/t/8ab5c2b9e265dbff/resultsHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd36830ms:method, :authority, :scheme, :path, cache-control, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
11:57:41.671GET/t/8ab5c2b9e265dbff/resultsHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd36830ms:method, :authority, :scheme, :path, cache-control, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
11:57:43.740GET/t/8ab5c2b9e265dbff/resultsHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd36830ms:method, :authority, :scheme, :path, cache-control, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
11:57:45.172GET/t/8ab5c2b9e265dbff/resultsHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd36830ms:method, :authority, :scheme, :path, cache-control, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
11:58:35.686GET/t/8ab5c2b9e265dbff/detailHTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd530212ms:method, :authority, :scheme, :path, cache-control, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
11:58:38.272GET/t/8ab5c2b9e265dbff/detail?all=1HTTP/2.0200text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7gzip, deflate, br, zstd22496243ms:method, :authority, :scheme, :path, cache-control, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, upgrade-insecure-requests, user-agent, accept, sec-fetch-site, sec-fetch-mode, sec-fetch-user, sec-fetch-dest, referer, accept-encoding, accept-language, cookie, cookie, priorityCache-Control: no-store; Content-Type: text/html; charset=utf-8
Raw event log (4 observations)
TimeProbeDetail
11:56:41.244img_avif:fetchednumber=4022 bytes=736 accept="image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8"
11:56:41.252img_webp:fetchednumber=3022 bytes=726 accept="image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8"
11:56:41.253img_jpeg:fetchednumber=2022 bytes=6520 accept="image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8"
11:56:41.253img_png:fetchednumber=1022 bytes=1549 accept="image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8"

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)

5 request(s)

TLS (per connection)

ConnJA4JA3JA3 hashSNIALPN offeredALPN negotiatedTLS negotiatedHighest offeredCipher negotiatedGREASEECHCipher suites offeredExtensions in orderSupported groupsSignature algorithms
#1t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,43-10-45-13-23-0-51-5-16-11-35,29-23-24,0447774a70dc04f0bab6bdb1b0c7bcf07ai-tester.paulcalvano.comh2, http/1.1h2TLS 1.3TLS 13TLS_AES_128_GCM_SHA256falsefalse0x1302 TLS_AES_256_GCM_SHA384, 0x1301 TLS_AES_128_GCM_SHA256, 0x1303 TLS_CHACHA20_POLY1305_SHA256, 0xc02c ECDHE_ECDSA_AES_256_GCM_SHA384, 0xc02b ECDHE_ECDSA_AES_128_GCM_SHA256, 0xcca9 ECDHE_ECDSA_CHACHA20_POLY1305, 0xc030 ECDHE_RSA_AES_256_GCM_SHA384, 0xc02f ECDHE_RSA_AES_128_GCM_SHA256, 0xcca8 ECDHE_RSA_CHACHA20_POLY1305, 0x00ff0x002b supported_versions, 0x000a supported_groups, 0x002d psk_key_exchange_modes, 0x000d signature_algorithms, 0x0017 extended_master_secret, 0x0000 server_name, 0x0033 key_share, 0x0005 status_request, 0x0010 alpn, 0x000b ec_point_formats, 0x0023 session_ticket0x001d x25519, 0x0017 secp256r1, 0x0018 secp384r10x0503 ecdsa_secp384r1_sha384, 0x0403 ecdsa_secp256r1_sha256, 0x0807, 0x0806 rsa_pss_rsae_sha512, 0x0805 rsa_pss_rsae_sha384, 0x0804 rsa_pss_rsae_sha256, 0x0601 rsa_pkcs1_sha512, 0x0501 rsa_pkcs1_sha384, 0x0401 rsa_pkcs1_sha256
#2t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,35-11-45-10-13-23-43-16-0-51-5,29-23-24,086e8b43e4dda0ef63ac48bdc362bf32bai-tester.paulcalvano.comh2, http/1.1h2TLS 1.3TLS 13TLS_AES_128_GCM_SHA256falsefalse0x1302 TLS_AES_256_GCM_SHA384, 0x1301 TLS_AES_128_GCM_SHA256, 0x1303 TLS_CHACHA20_POLY1305_SHA256, 0xc02c ECDHE_ECDSA_AES_256_GCM_SHA384, 0xc02b ECDHE_ECDSA_AES_128_GCM_SHA256, 0xcca9 ECDHE_ECDSA_CHACHA20_POLY1305, 0xc030 ECDHE_RSA_AES_256_GCM_SHA384, 0xc02f ECDHE_RSA_AES_128_GCM_SHA256, 0xcca8 ECDHE_RSA_CHACHA20_POLY1305, 0x00ff0x0023 session_ticket, 0x000b ec_point_formats, 0x002d psk_key_exchange_modes, 0x000a supported_groups, 0x000d signature_algorithms, 0x0017 extended_master_secret, 0x002b supported_versions, 0x0010 alpn, 0x0000 server_name, 0x0033 key_share, 0x0005 status_request0x001d x25519, 0x0017 secp256r1, 0x0018 secp384r10x0503 ecdsa_secp384r1_sha384, 0x0403 ecdsa_secp256r1_sha256, 0x0807, 0x0806 rsa_pss_rsae_sha512, 0x0805 rsa_pss_rsae_sha384, 0x0804 rsa_pss_rsae_sha256, 0x0601 rsa_pkcs1_sha512, 0x0501 rsa_pkcs1_sha384, 0x0401 rsa_pkcs1_sha256
#3t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,10-16-51-0-45-35-5-43-11-23-13,29-23-24,0d0e7aeb2de7de9b836851af2534db0adai-tester.paulcalvano.comh2, http/1.1h2TLS 1.3TLS 13TLS_AES_128_GCM_SHA256falsefalse0x1302 TLS_AES_256_GCM_SHA384, 0x1301 TLS_AES_128_GCM_SHA256, 0x1303 TLS_CHACHA20_POLY1305_SHA256, 0xc02c ECDHE_ECDSA_AES_256_GCM_SHA384, 0xc02b ECDHE_ECDSA_AES_128_GCM_SHA256, 0xcca9 ECDHE_ECDSA_CHACHA20_POLY1305, 0xc030 ECDHE_RSA_AES_256_GCM_SHA384, 0xc02f ECDHE_RSA_AES_128_GCM_SHA256, 0xcca8 ECDHE_RSA_CHACHA20_POLY1305, 0x00ff0x000a supported_groups, 0x0010 alpn, 0x0033 key_share, 0x0000 server_name, 0x002d psk_key_exchange_modes, 0x0023 session_ticket, 0x0005 status_request, 0x002b supported_versions, 0x000b ec_point_formats, 0x0017 extended_master_secret, 0x000d signature_algorithms0x001d x25519, 0x0017 secp256r1, 0x0018 secp384r10x0503 ecdsa_secp384r1_sha384, 0x0403 ecdsa_secp256r1_sha256, 0x0807, 0x0806 rsa_pss_rsae_sha512, 0x0805 rsa_pss_rsae_sha384, 0x0804 rsa_pss_rsae_sha256, 0x0601 rsa_pkcs1_sha512, 0x0501 rsa_pkcs1_sha384, 0x0401 rsa_pkcs1_sha256
#4t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,10-16-51-0-35-13-43-11-5-45-23,29-23-24,0ced1bbff6787394fe21200923bf0d16dai-tester.paulcalvano.comh2, http/1.1h2TLS 1.3TLS 13TLS_AES_128_GCM_SHA256falsefalse0x1302 TLS_AES_256_GCM_SHA384, 0x1301 TLS_AES_128_GCM_SHA256, 0x1303 TLS_CHACHA20_POLY1305_SHA256, 0xc02c ECDHE_ECDSA_AES_256_GCM_SHA384, 0xc02b ECDHE_ECDSA_AES_128_GCM_SHA256, 0xcca9 ECDHE_ECDSA_CHACHA20_POLY1305, 0xc030 ECDHE_RSA_AES_256_GCM_SHA384, 0xc02f ECDHE_RSA_AES_128_GCM_SHA256, 0xcca8 ECDHE_RSA_CHACHA20_POLY1305, 0x00ff0x000a supported_groups, 0x0010 alpn, 0x0033 key_share, 0x0000 server_name, 0x0023 session_ticket, 0x000d signature_algorithms, 0x002b supported_versions, 0x000b ec_point_formats, 0x0005 status_request, 0x002d psk_key_exchange_modes, 0x0017 extended_master_secret0x001d x25519, 0x0017 secp256r1, 0x0018 secp384r10x0503 ecdsa_secp384r1_sha384, 0x0403 ecdsa_secp256r1_sha256, 0x0807, 0x0806 rsa_pss_rsae_sha512, 0x0805 rsa_pss_rsae_sha384, 0x0804 rsa_pss_rsae_sha256, 0x0601 rsa_pkcs1_sha512, 0x0501 rsa_pkcs1_sha384, 0x0401 rsa_pkcs1_sha256
#5t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,11-23-10-5-0-35-51-43-16-45-13,29-23-24,052cf517d631fd45fb1db2345dd8b6e66ai-tester.paulcalvano.comh2, http/1.1h2TLS 1.3TLS 13TLS_AES_128_GCM_SHA256falsefalse0x1302 TLS_AES_256_GCM_SHA384, 0x1301 TLS_AES_128_GCM_SHA256, 0x1303 TLS_CHACHA20_POLY1305_SHA256, 0xc02c ECDHE_ECDSA_AES_256_GCM_SHA384, 0xc02b ECDHE_ECDSA_AES_128_GCM_SHA256, 0xcca9 ECDHE_ECDSA_CHACHA20_POLY1305, 0xc030 ECDHE_RSA_AES_256_GCM_SHA384, 0xc02f ECDHE_RSA_AES_128_GCM_SHA256, 0xcca8 ECDHE_RSA_CHACHA20_POLY1305, 0x00ff0x000b ec_point_formats, 0x0017 extended_master_secret, 0x000a supported_groups, 0x0005 status_request, 0x0000 server_name, 0x0023 session_ticket, 0x0033 key_share, 0x002b supported_versions, 0x0010 alpn, 0x002d psk_key_exchange_modes, 0x000d signature_algorithms0x001d x25519, 0x0017 secp256r1, 0x0018 secp384r10x0503 ecdsa_secp384r1_sha384, 0x0403 ecdsa_secp256r1_sha256, 0x0807, 0x0806 rsa_pss_rsae_sha512, 0x0805 rsa_pss_rsae_sha384, 0x0804 rsa_pss_rsae_sha256, 0x0601 rsa_pkcs1_sha512, 0x0501 rsa_pkcs1_sha384, 0x0401 rsa_pkcs1_sha256

HTTP/2 (per connection)

ConnFingerprintPseudo-header orderHeader orderSETTINGSWindow updatePriority framesFirst frame types
#12:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p:method,:scheme,:authority,:path:method, :scheme, :authority, :path, accept, user-agent, accept-encodingENABLE_PUSH(2)=0, INITIAL_WINDOW_SIZE(4)=2097152, MAX_FRAME_SIZE(5)=16384, MAX_HEADER_LIST_SIZE(6)=163845177345SETTINGS, SETTINGS, WINDOW_UPDATE, HEADERS
#22:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p:method,:scheme,:authority,:path:method, :scheme, :authority, :path, accept, user-agent, accept-encodingENABLE_PUSH(2)=0, INITIAL_WINDOW_SIZE(4)=2097152, MAX_FRAME_SIZE(5)=16384, MAX_HEADER_LIST_SIZE(6)=163845177345SETTINGS, WINDOW_UPDATE, HEADERS, SETTINGS, HEADERS
#32:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p:method,:scheme,:authority,:path:method, :scheme, :authority, :path, accept, user-agent, accept-encodingENABLE_PUSH(2)=0, INITIAL_WINDOW_SIZE(4)=2097152, MAX_FRAME_SIZE(5)=16384, MAX_HEADER_LIST_SIZE(6)=163845177345SETTINGS, WINDOW_UPDATE, HEADERS
#42:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p:method,:scheme,:authority,:path:method, :scheme, :authority, :path, accept, user-agent, accept-encodingENABLE_PUSH(2)=0, INITIAL_WINDOW_SIZE(4)=2097152, MAX_FRAME_SIZE(5)=16384, MAX_HEADER_LIST_SIZE(6)=163845177345SETTINGS, WINDOW_UPDATE, HEADERS
#52:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p:method,:scheme,:authority,:path:method, :scheme, :authority, :path, accept, user-agent, accept-encodingENABLE_PUSH(2)=0, INITIAL_WINDOW_SIZE(4)=2097152, MAX_FRAME_SIZE(5)=16384, MAX_HEADER_LIST_SIZE(6)=163845177345SETTINGS, WINDOW_UPDATE, HEADERS

TCP (per connection)

ConnRTTRTT varSnd MSSRcv MSSAdv MSSCwndRcv spaceRetransmitsTotal retransLost
#130.0ms5.0ms140853614081014080000
#234.9ms1.1ms140853614081314080000
#336.2ms10.4ms140853614081014080000
#434.5ms7.3ms140853614081014080000
#540.4ms11.4ms140853614081014080000

Packet / SYN (from pcap)

TTL, initial window and MSS come from the raw SYN packet -- the one layer a proxy fleet can't easily disguise, since it describes the kernel that opened the socket. Best-effort: requires a capture covering this connection's timestamp.

ConnTTLWindow sizeMSSWindow scaleSACK permittedFingerprintPcap file
#11236272714607true123:62727:1460:7syn-20260914-151130.pcap
#21236272714607true123:62727:1460:7syn-20260914-151130.pcap
#31236272714607true123:62727:1460:7syn-20260914-151130.pcap
#41236272714607true123:62727:1460:7syn-20260914-151130.pcap
#51236272714607true123:62727:1460:7syn-20260914-151130.pcap

Download raw capture: syn-20260914-151130.pcap

No self-report from this client. If it couldn't call /report itself, you can file one manually on its behalf.

Requests

Response headers are what the handler explicitly set. Content-Length and Date are added by Go's HTTP stack directly to the wire afterward and never pass back through the header map, so they don't appear here -- see Bytes for the actual byte count.

TimeMethodPathProtoStatusAcceptAccept-EncodingServed enc.BytesDurationHeader orderResponse headers
15:22:05.929GET/t/8ab5c2b9e265dbff/deleteHTTP/2.0200*/*gzip, br, zstd, deflate13490ms:method, :scheme, :authority, :path, accept, user-agent, accept-encodingCache-Control: no-store; Content-Type: text/html; charset=utf-8
15:23:28.319GET/t/8ab5c2b9e265dbff/detailHTTP/2.0200*/*gzip, br, zstd, deflate12708299ms:method, :scheme, :authority, :path, accept, user-agent, accept-encodingCache-Control: no-store; Content-Type: text/html; charset=utf-8
16:06:12.533GET/t/8ab5c2b9e265dbff/report-formHTTP/2.0200*/*gzip, br, zstd, deflate237423ms:method, :scheme, :authority, :path, accept, user-agent, accept-encodingCache-Control: no-store; Content-Type: text/html; charset=utf-8
16:06:29.269GET/t/8ab5c2b9e265dbff/resultsHTTP/2.0200*/*gzip, br, zstd, deflate38290ms:method, :scheme, :authority, :path, accept, user-agent, accept-encodingCache-Control: no-store; Content-Type: text/html; charset=utf-8
16:08:06.561GET/t/8ab5c2b9e265dbff/pcap/syn-20260914-151130.pcapHTTP/2.0200*/*gzip, br, zstd, deflate36640ms:method, :scheme, :authority, :path, accept, user-agent, accept-encodingAccept-Ranges: bytes; Content-Disposition: attachment; filename="syn-20260914-151130.pcap"; Content-Length: 3664; Content-Type: application/vnd.tcpdump.pcap; Last-Modified: Mon, 14 Sep 2026 16:07:44 GMT