server name

alt1-mtalk.google.com

Too few observations

Too little traffic to read — a spread of 1.0 over three connections is noise; the same over sixty thousand is worth a look.

2 clients14 obs2026-07-19 → 2026-07-23

domain

explore in graph →

Read

client diversity

2 distinct client stacks reach this name.

concentration

1.000 traffic splits near-evenly across many unrelated stacks.

Spread is entropy over the fingerprints reaching this domain, not over the domains a fingerprint reaches. It can’t distinguish one scraper from many people — it measures the mix of software, not who runs it.

Footprint

observations

distinct clients

2026-07-19

first seen

2026-07-23

last seen

Client stacks reaching this name

Android (Conscrypt) / Flutter (BoringSSL)fixed
50%
Android — Firebase / GCM (Conscrypt)fixed
50%

Busiest 2 client stacks on this page. Share is the fraction of this name’s observations. Many distinct fingerprints on a low-traffic name is itself worth a look; a blank JA3 is a permuting client — open the fingerprint for its variants.

client	JA3	stability	count	share	first seen	last seen
Android (Conscrypt) / Flutter (BoringSSL) mobile-BoringSSL cipher-suite signature — Android system TLS (Play Services, Firebase, OkHttp apps) and Flutter/Dart; any ALPN	58e34c29…f1f49e	fixed	7	50%	2026-07-19	2026-07-23
Android — Firebase / GCM (Conscrypt) Android system TLS (Conscrypt/BoringSSL); no ALPN — mtalk.google.com (push)	c27f440f…4a7670	fixed	7	50%	2026-07-19	2026-07-23