server name
gateway.facebook.com
Mixed audience
A mix of client stacks reach this name, none dominating.
- domain
Read
client diversity
13 distinct client stacks reach this name.
concentration
0.718 traffic splits near-evenly across many unrelated stacks.
Spread is entropy over the fingerprints reaching this domain, not over the domains a fingerprint reaches. It can’t distinguish one scraper from many people — it measures the mix of software, not who runs it.
Footprint
149
observations
13
distinct clients
2026-07-19
first seen
2026-07-23
last seen
Client stacks reaching this name
- t13d1516h1_8da…5e64def3randomising39%
- t13d1515h1_8da…fe35d3a5randomising21%
- t13d1516h1_8da…5d69fb96randomising11%
- t13d1515h1_8da…b8c727f2randomising8.7%
- t13d1616h1_86a…851837fdmulti-build8.1%
- t13d1616h1_86a…189014cfmulti-build4.7%
- Mozilla Firefoxmulti-build2.0%
- 2.0%
- t13d1518h1_8da…0188ff37unclassified1.3%
- t00d0310h2_55b…996d9024multi-build0.7%
- t00d0308h2_55b…928cbf90unclassified0.7%
- Android (Conscrypt) / Flutter (BoringSSL)unclassified0.7%
- t00d0310h2_55b…9a93dbc2unclassified0.7%
Busiest 13 client stacks on this page. Share is the fraction of this name’s observations. Many distinct fingerprints on a low-traffic name is itself worth a look; a blank JA3 is a permuting client — open the fingerprint for its variants.
| client | JA3 | stability | count | share | first seen | last seen |
|---|---|---|---|---|---|---|
| t13d1516h1_8daaf…5e64def3 | — | randomising | 58 | 39% | 2026-07-19 | 2026-07-23 |
| t13d1515h1_8daaf…fe35d3a5 | — | randomising | 31 | 21% | 2026-07-19 | 2026-07-23 |
| t13d1516h1_8daaf…5d69fb96 | — | randomising | 16 | 11% | 2026-07-19 | 2026-07-23 |
| t13d1515h1_8daaf…b8c727f2 | — | randomising | 13 | 8.7% | 2026-07-19 | 2026-07-23 |
| t13d1616h1_86a27…851837fd | — | multi-build | 12 | 8.1% | 2026-07-19 | 2026-07-23 |
| t13d1616h1_86a27…189014cf | — | multi-build | 7 | 4.7% | 2026-07-22 | 2026-07-23 |
| Mozilla Firefox Firefox cipher-suite signature — also forks (Zen, LibreWolf, Tor Browser); any extension permutation or version | — | multi-build | 3 | 2.0% | 2026-07-23 | 2026-07-23 |
| Android (Conscrypt) / Flutter (BoringSSL) mobile-BoringSSL cipher-suite signature — Android system TLS (Play Services, Firebase, OkHttp apps) and Flutter/Dart; any ALPN | b90ece4a…a72e09 | fixed | 3 | 2.0% | 2026-07-20 | 2026-07-22 |
| t13d1518h1_8daaf…0188ff37 | — | unclassified | 2 | 1.3% | 2026-07-22 | 2026-07-22 |
| t00d0310h2_55b37…996d9024 | — | multi-build | 1 | 0.7% | 2026-07-21 | 2026-07-21 |
| t00d0308h2_55b37…928cbf90 | 0ffa7f07…0be43c | unclassified | 1 | 0.7% | 2026-07-19 | 2026-07-19 |
| Android (Conscrypt) / Flutter (BoringSSL) mobile-BoringSSL cipher-suite signature — Android system TLS (Play Services, Firebase, OkHttp apps) and Flutter/Dart; any ALPN | aa335cae…2b9ad0 | unclassified | 1 | 0.7% | 2026-07-22 | 2026-07-22 |
| t00d0310h2_55b37…9a93dbc2 | 83cb0333…179752 | unclassified | 1 | 0.7% | 2026-07-19 | 2026-07-19 |