go-tls-rotate

Forges a real-browser TLS ClientHello with uTLS (Go) — a pure wire-layer JA3/JA4 spoof, no browser engine — rotating its TLS/JA4 fingerprint mid-session.

botverdict

1.00score

5/185checks fired

Convicting tells 5

net.h2_unknown_vs_uaModern-browser UA but the HTTP/2 stack matches no known browser engine

net.ja4_unstable_within_sessionTLS engine (JA4_b cipher identity) changed within one session

net.no_js_executionPage request with a TLS fingerprint but no browser layer (no JS ran — scripted client)

net.tls_grease_vs_uaUA claims a GREASEing-engine browser (Chromium/Safari) but the TLS ClientHello has no GREASE

net.tls_pq_keyshare_vs_uaUA claims current Chrome but the TLS handshake offers no post-quantum key share

← all evaders · the detection matrix