Species index / toolkit

python-requests

Operator not identifiable from the User-Agent alone. Identity is self-declared and unverified.

Identity

Default UA of the Python requests library. Common for hand-rolled agents.

What it went looking for

The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.

Protocol fingerprint

TLS client fingerprint

Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.

Header order

The order a client sends its HTTP headers in is a design fingerprint of the library that built the request. Captured on plaintext port 80 only, since the proxy normalises order before the application sees it.

1. Host
2. User-Agent
3. Accept-Encoding
4. Accept
5. Connection

1. Host
2. User-Agent
3. Accept-Encoding
4. Accept
5. Connection
6. Accept-Language
7. DNT
8. Sec-GPC
9. Upgrade-Insecure-Requests
10. Sec-Fetch-Dest
11. Sec-Fetch-Mode
12. Sec-Fetch-Site
13. Sec-Fetch-User
14. Priority
15. TE

1. Accept-Encoding
2. Host
3. User-Agent
4. Connection

1. Host
2. Connection
3. Accept-Encoding
4. Accept
5. User-Agent

Requests per day (60 days)