JA4-implied OS contradicts TCP/IP-implied OS
net.tls_os_vs_tcp_os · convicts
networklayer
coherencecategory
What it catches
Kitsune; cf. Vastel FP-Inconsistent (IMC 2025)
Signals it reads
network.ja4_os_hint network.tcp_os_hint
How it fires
not_equal
Bypassed by 10
Frontier evaders that reach the detector uncaught (scored only suspicious, defeating every convicting tell) — this check is not one that stops them. The red-team frontier this detection still has to convict.