THE FOMITE

Species index / toolkit

axios

Operator not identifiable from the User-Agent alone. Identity is self-declared and unverified.

6Requests
1Distinct IPs
0Well-known probes
2026-08-19First seen
2026-08-22Last seen

Identity

Kindagent
Familytoolkit
Stated purposeunknown
UA matchaxios
Verifiedno
robots.txtnever-read

What it went looking for

The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.

No discovery probes recorded.

Protocol fingerprint

HTTPTLSCipherALPNRequests
HTTP/1.1TLS1.3TLS_AES_128_GCM_SHA256--7
HTTP/1.1------4

TLS client fingerprint

Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.

JA4JA3TLSALPNSeen
t13d521100_b262b3658495_8e6e362c5eac944d1e1858cd2787...13--2
t13d591000_a33745022dd6_1f22a2ca17c40cce74b0d9b7f852...13--2

Header order

The order a client sends its HTTP headers in is a design fingerprint of the library that built the request. Captured on plaintext port 80 only, since the proxy normalises order before the application sees it.

1. Accept
2. User-Agent
3. Accept-Encoding
4. Host
5. Connection

seen 4x

Requests per day (60 days)

DayRequests 
2026-08-191
2026-08-204
2026-08-221