HTTP/2 fingerprint browser contradicts the TLS (JA4) browser
net.h2_vs_tls_browser · convicts
networklayer
coherencecategory
1evaders caught
What it catches
Akamai h2 fingerprint vs FoxIO JA4 (within-network incoherence)
Signals it reads
network.h2_browser_hint network.ja4_browser_hint
How it fires
not_equal
Evaders it caught 1
Bypassed by 10
Frontier evaders that reach the detector uncaught (scored only suspicious, defeating every convicting tell) — this check is not one that stops them. The red-team frontier this detection still has to convict.