THE FOMITE

Species index / google

Googlebot

Operated by Google. Identity confirmed by forward and reverse DNS.

275Requests
6Distinct IPs
99Well-known probes
2026-08-19First seen
2026-10-03Last seen

Identity

Kindcrawler
Familygoogle
Stated purposesearch
UA matchgooglebot
Verifiedyes
robots.txtcompliant
Operator docshttps://developers.google.com/search/docs/crawling-indexing/googlebot

What it went looking for

The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.

PathHitsFirstLast
/robots.txt7682026-08-192026-10-03
/sitemap.xml362026-08-192026-09-23
/llms.txt52026-08-192026-08-27
/.well-known/glama.json22026-08-222026-08-29
/.well-known/agent.json22026-08-292026-09-03
/.well-known/oauth-authorization-server22026-08-242026-08-27
/.well-known/agent-card.json22026-08-252026-08-27
/.well-known/x40222026-09-032026-09-06
/.well-known/oauth-authorization-server/mcp12026-08-232026-08-23
/.well-known/security.txt12026-08-202026-08-20
/ai.txt12026-08-202026-08-20
/.well-known/oauth-protected-resource12026-08-232026-08-23
/.well-known/oauth-protected-resource/mcp12026-08-232026-08-23

Protocol fingerprint

HTTPTLSCipherALPNRequests
HTTP/1.1TLS1.3TLS_AES_128_GCM_SHA256--2,822
HTTP/1.1------62
HTTP/1.1TLS1.3TLS_AES_128_GCM_SHA256http/1.11

TLS client fingerprint

Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.

JA4JA3TLSALPNSeen
t13d181300_e8a523a41297_43ade6aba3dfb4da7f95e46bf2cf...13--2,144
t13d1011h1_61a7ad8aa9b6_3fcd1a44f3e3d20927c9a4a20077...13http/1.11
t13d131100_f57a46bbacb6_ab7e3b40a6779b7dcdf3f997f1fb...13--1
t13d201100_2b729b4bf6f3_36bf25f296df68b3ecfaf0034bb9...13--1

Header order

The order a client sends its HTTP headers in is a design fingerprint of the library that built the request. Captured on plaintext port 80 only, since the proxy normalises order before the application sees it.

1. Host
2. Connection
3. Accept
4. User-Agent
5. Accept-Encoding

seen 32x

1. Host
2. AMP-Cache-Transform
3. Connection
4. Accept
5. From
6. User-Agent
7. Accept-Encoding
8. If-Modified-Since

seen 18x

1. Host
2. AMP-Cache-Transform
3. Connection
4. Accept
5. From
6. User-Agent
7. Accept-Encoding

seen 7x

1. Host
2. Connection
3. Accept
4. From
5. User-Agent
6. Accept-Encoding

seen 5x

Requests per day (60 days)

DayRequests 
2026-08-191
2026-08-206
2026-08-212
2026-08-222
2026-08-233
2026-08-242
2026-08-251
2026-08-268
2026-08-272
2026-08-284
2026-08-292
2026-08-306
2026-08-312
2026-09-011
2026-09-022
2026-09-032
2026-09-042
2026-09-051
2026-09-061
2026-09-073
2026-09-082
2026-09-092
2026-09-101
2026-09-112
2026-09-123
2026-09-133
2026-09-143
2026-09-152
2026-09-162
2026-09-173
2026-09-183
2026-09-192
2026-09-202
2026-09-212
2026-09-229
2026-09-232
2026-09-243
2026-09-253
2026-09-263
2026-09-2729
2026-09-2838
2026-09-2928
2026-09-304
2026-10-0129
2026-10-0229
2026-10-0313