Species index / unknown

Headless Chrome

Operator not identifiable from the User-Agent alone. Identity is self-declared and unverified.

75Requests

2Distinct IPs

0Well-known probes

2026-08-19First seen

2026-09-26Last seen

Identity

Kind	browser
Family	unknown
Stated purpose	unknown
UA match	`headlesschrome`
Verified	no
robots.txt	never-read

A browser-driving agent. Operator unidentifiable from UA alone.

What it went looking for

The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.

No discovery probes recorded.

Protocol fingerprint

HTTP	TLS	Cipher	ALPN	Requests
HTTP/2.0	TLS1.3	TLS_AES_128_GCM_SHA256	h2	95
HTTP/2.0	TLS1.3	TLS_CHACHA20_POLY1305_SHA256	h2	9
HTTP/1.1	TLS1.3	TLS_AES_128_GCM_SHA256	http/1.1	7
HTTP/1.1	--	--	--	1

TLS client fingerprint

Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.

JA4	JA3	TLS	ALPN	Seen
t13d5212h1_b262b3658495_8e6e362c5eac	d67b094811e51451...	13	http/1.1	2
t13d1516h2_8daaf6152771_806a8c22fdea	cb6d9eecce2060d4...	13	h2,http/1.1	1
t13d1516h2_8daaf6152771_806a8c22fdea	d18647a536d40199...	13	h2,http/1.1	1
t13d1516h2_8daaf6152771_d8a2da3f94cd	a2dd6821be812022...	13	h2,http/1.1	1
t13d1518h2_8daaf6152771_4980c97edce0	592e8038e304eecb...	13	h2,http/1.1	1
t13d1712h1_ab0a1bf427ad_882d495ac381	7291ea5e449f2c7b...	13	http/1.1	1

Header order

The order a client sends its HTTP headers in is a design fingerprint of the library that built the request. Captured on plaintext port 80 only, since the proxy normalises order before the application sees it.

1. Host
2. Connection
3. Pragma
4. Cache-Control
5. Upgrade-Insecure-Requests
6. User-Agent
7. Accept
8. Accept-Encoding
9. Accept-Language

seen 2x

Requests per day (60 days)

Day	Requests
2026-08-19	10
2026-08-20	14
2026-08-27	9
2026-08-28	17
2026-08-30	7
2026-09-16	9
2026-09-26	9