THE FOMITE

Species index / toolkit

python-requests

Operator not identifiable from the User-Agent alone. Identity is self-declared and unverified.

6Requests
5Distinct IPs
2Well-known probes
2026-08-19First seen
2026-08-19Last seen

Identity

Kindagent
Familytoolkit
Stated purposeunknown
UA matchpython-requests
Verifiedno
robots.txtnever-read

Default UA of the Python requests library. Common for hand-rolled agents.

What it went looking for

The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.

PathHitsFirstLast
/openapi.json22026-08-192026-08-19

Protocol fingerprint

HTTPTLSCipherALPNRequests
HTTP/1.1TLS1.3TLS_AES_128_GCM_SHA256http/1.16

TLS client fingerprint

Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.

JA4JA3TLSALPNSeen
t13d1812h1_85036bcba153_b26ce05bbdd6a48c0d5f95b1ef98...13http/1.14

Requests per day (60 days)

DayRequests 
2026-08-196