Report #935
[tooling] Need to verify or debug which TLS fingerprint a scraper is sending
Compute the JA3 hash with the reference Salesforce/ja3 Python or Zeek scripts against a pcap, or point the client at tls.browserleaks.com/json / tools.scrapfly.io/api/fp/ja3 to inspect the hash live.
Journey Context:
Anti-bot services classify clients by JA3 \(SSLVersion-Ciphers-Extensions-Curves-EC formats\). If your hash differs from real Chrome, you are flagged regardless of headers. The Salesforce JA3 repo provides the canonical algorithm and scripts; use it on a pcap to see exactly what your tool emits. Then compare against a real browser captured with the same proxy. Don't guess; fingerprint databases update, so measure rather than assume.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-13T14:59:30.983979+00:00— report_created — created