server name
www.tiktok.com
Dominated by one stack
One client stack dominates the traffic to this name — normal for an API or a CDN origin.
- domain
Read
client diversity
25 distinct client stacks reach this name.
concentration
0.225one client stack dominates — normal for an API or a CDN origin.
Spread is entropy over the fingerprints reaching this domain, not over the domains a fingerprint reaches. It can’t distinguish one scraper from many people — it measures the mix of software, not who runs it.
Footprint
5,860
observations
25
distinct clients
2026-07-19
first seen
2026-07-23
last seen
Client stacks reaching this name
- Google Chrome / Chromiummulti-build82%
- t13d1513h2_8da…ead5a15bmulti-build7.8%
- 7.3%
- t13d4312h1_c78…e481755emulti-build1.9%
- 0.5%
- Google Chrome / Chromiumrandomising0.3%
- 0.2%
- Python requests / urllib3multi-build0.1%
- Google Chrome / Chromiumrandomising<0.1%
- Google Chrome / Chromiumrandomising<0.1%
- Google Chrome / Chromiummulti-build<0.1%
- <0.1%
- <0.1%
- <0.1%
- Python httpx / aiohttpmulti-build<0.1%
Busiest 15 client stacks on this page. Share is the fraction of this name’s observations. Many distinct fingerprints on a low-traffic name is itself worth a look; a blank JA3 is a permuting client — open the fingerprint for its variants.
| client | JA3 | stability | count | share | first seen | last seen |
|---|---|---|---|---|---|---|
| Google Chrome / Chromium Chromium cipher-suite signature — Chrome, Edge, Brave, Opera; any extension permutation or version | — | multi-build | 4,781 | 82% | 2026-07-19 | 2026-07-23 |
| t13d1513h2_8daaf…ead5a15b | — | multi-build | 458 | 7.8% | 2026-07-19 | 2026-07-23 |
| t13d5212h2_b262b…362c5eac | d67b0948…14309f | fixed | 426 | 7.3% | 2026-07-19 | 2026-07-23 |
| t13d4312h1_c7886…e481755e | — | multi-build | 109 | 1.9% | 2026-07-21 | 2026-07-23 |
| t13d2313h2_24fc4…ead5a15b | 3d88ffaf…38a0b7 | fixed | 27 | 0.5% | 2026-07-19 | 2026-07-23 |
| Google Chrome / Chromium Chromium cipher-suite signature — Chrome, Edge, Brave, Opera; any extension permutation or version | — | randomising | 18 | 0.3% | 2026-07-19 | 2026-07-23 |
| t12d2805h1_d9431…5bb78ec9 | 6776eeb3…b4dd8d | fixed | 10 | 0.2% | 2026-07-21 | 2026-07-22 |
| Python requests / urllib3 official CPython build (OpenSSL 3.0.x — Windows / macOS / uv); ja4_b is the build, ja4_c b26ce05bbdd6 is urllib3's own SSLContext (post_handshake_auth, no session ticket) — httpx on the same build differs by that one extension. First seen as Windows 10, Python 3.14. | — | multi-build | 7 | 0.1% | 2026-07-19 | 2026-07-22 |
| Google Chrome / Chromium Chromium cipher-suite signature — Chrome, Edge, Brave, Opera; any extension permutation or version | — | randomising | 4 | <0.1% | 2026-07-20 | 2026-07-22 |
| Google Chrome / Chromium Chromium cipher-suite signature — Chrome, Edge, Brave, Opera; any extension permutation or version | — | randomising | 2 | <0.1% | 2026-07-19 | 2026-07-22 |
| Google Chrome / Chromium Chromium cipher-suite signature — Chrome, Edge, Brave, Opera; any extension permutation or version | — | multi-build | 2 | <0.1% | 2026-07-22 | 2026-07-23 |
| Android (Conscrypt) / Flutter (BoringSSL) mobile-BoringSSL cipher-suite signature — Android system TLS (Play Services, Firebase, OkHttp apps) and Flutter/Dart; any ALPN | bb540a0a…aca004 | fixed | 2 | <0.1% | 2026-07-22 | 2026-07-22 |
| t13d3112h2_e8f1e…e05bbdd6 | 0149f47e…5a6323 | fixed | 2 | <0.1% | 2026-07-22 | 2026-07-23 |
| Python urllib (stdlib) Python 3.11–3.13, Debian (OpenSSL 3) | ebed420a…9f4e4a | fixed | 1 | <0.1% | 2026-07-19 | 2026-07-19 |
| Python httpx / aiohttp Python 3.11–3.13, Debian (OpenSSL 3) | — | multi-build | 1 | <0.1% | 2026-07-22 | 2026-07-22 |
| Google Chrome / Chromium Chromium cipher-suite signature — Chrome, Edge, Brave, Opera; any extension permutation or version | — | randomising | 1 | <0.1% | 2026-07-22 | 2026-07-22 |
| t13d1812h1_85036…e481755e | — | multi-build | 1 | <0.1% | 2026-07-23 | 2026-07-23 |
| t13d1512h2_8daaf…1c11c48b | 88edb5a0…01e55a | fixed | 1 | <0.1% | 2026-07-22 | 2026-07-22 |
| t13d1812h1_85036…fd1b1717 | 304734bb…f83f11 | unclassified | 1 | <0.1% | 2026-07-23 | 2026-07-23 |
| t13d4313h1_c7886…d089df7a | 76f01df9…1bcbaa | unclassified | 1 | <0.1% | 2026-07-23 | 2026-07-23 |
| Node.js fetch / undici Node 22 — bundled OpenSSL 3 (newer) | — | multi-build | 1 | <0.1% | 2026-07-20 | 2026-07-20 |
| Google Chrome / Chromium Chromium cipher-suite signature — Chrome, Edge, Brave, Opera; any extension permutation or version | — | randomising | 1 | <0.1% | 2026-07-23 | 2026-07-23 |
| Node.js fetch / undici Node 18–20 — bundled OpenSSL 3 (same on Debian & Alpine) | 1a28e690…68922c | fixed | 1 | <0.1% | 2026-07-20 | 2026-07-20 |
| t13d5912h1_a3374…9dd1d406 | 70cb5ca6…36a5ea | fixed | 1 | <0.1% | 2026-07-20 | 2026-07-20 |
| Google Chrome / Chromium Chromium cipher-suite signature — Chrome, Edge, Brave, Opera; any extension permutation or version | — | randomising | 1 | <0.1% | 2026-07-19 | 2026-07-19 |