THE FOMITE

Species index / toolkit

Deno

Operator not identifiable from the User-Agent alone. Identity is self-declared and unverified.

20Requests
2Distinct IPs
6Well-known probes
2026-08-19First seen
2026-09-01Last seen

Identity

Kindagent
Familytoolkit
Stated purposeunknown
UA matchdeno
Verifiedno
robots.txtnever-read

Deno runtime fetch.

What it went looking for

The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.

PathHitsFirstLast
/.well-known/oauth-protected-resource12026-09-012026-09-01
/.well-known/oauth-protected-resource/mcp12026-09-012026-09-01
/.well-known/oauth-authorization-server/mcp12026-09-012026-09-01
/.well-known/openid-configuration/mcp12026-09-012026-09-01
/.well-known/openid-configuration12026-09-012026-09-01
/.well-known/oauth-authorization-server12026-09-012026-09-01

Protocol fingerprint

HTTPTLSCipherALPNRequests
HTTP/2.0TLS1.3TLS_AES_128_GCM_SHA256h220

TLS client fingerprint

Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.

JA4JA3TLSALPNSeen
t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e316cd929efe8d5338...13h2,http/1.11
t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e333a7c1829473b795...13h2,http/1.11
t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3656834d0b031689b...13h2,http/1.11
t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e37d787c3404ed2e76...13h2,http/1.11
t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e38d4430d18ec5818b...13h2,http/1.11
t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3ae43b615b6f26e13...13h2,http/1.11

Requests per day (60 days)

DayRequests 
2026-08-194
2026-08-242
2026-08-262
2026-08-292
2026-08-302
2026-09-018