tls-reputation.comTLS fingerprint reputation

server name

api.steampowered.com

Mixed audience

A mix of client stacks reach this name, none dominating.

24 clients554 obs2026-07-19 → 2026-07-23
domain

explore in graph →

Read

client diversity
24 distinct client stacks reach this name.
concentration
0.626 traffic splits near-evenly across many unrelated stacks.

Spread is entropy over the fingerprints reaching this domain, not over the domains a fingerprint reaches. It can’t distinguish one scraper from many people — it measures the mix of software, not who runs it.

Footprint

554
observations
24
distinct clients
2026-07-19
first seen
2026-07-23
last seen

Client stacks reaching this name

Busiest 15 client stacks on this page. Share is the fraction of this name’s observations. Many distinct fingerprints on a low-traffic name is itself worth a look; a blank JA3 is a permuting client — open the fingerprint for its variants.

clientJA3stabilitycountsharefirst seenlast seen
t13d161100_1711a…9e3a3a621968c882…9cbbfdfixed24945%2026-07-192026-07-23
t13d3112h1_e8f1e…e05bbdd6multi-build8215%2026-07-192026-07-23
t13d121100_a538d…921739dd0c10e9dc…ee9259fixed549.7%2026-07-192026-07-23
Google Chrome / Chromium
Chromium cipher-suite signature — Chrome, Edge, Brave, Opera; any extension permutation or version
randomising315.6%2026-07-232026-07-23
Node.js fetch / undici
Node 22 — bundled OpenSSL 3 (newer)
multi-build285.1%2026-07-202026-07-20
t12d210700_76e20…41c691ec3b5074b1…00ff0efixed203.6%2026-07-192026-07-23
t13d3613h1_01897…54ef087be690df03…cf6515fixed183.2%2026-07-192026-07-23
Node.js https / axios / got (no ALPN)
Node 18–20 — bundled OpenSSL 3 (same on Debian & Alpine)
multi-build173.1%2026-07-192026-07-21
t13d5213h1_b262b…3fb0a24cmulti-build112.0%2026-07-202026-07-20
Node.js https / axios / got (no ALPN)
Node 22 — bundled OpenSSL 3 (newer)
multi-build91.6%2026-07-192026-07-23
t13d181000_5d042…aca7449bmulti-build71.3%2026-07-202026-07-21
t13d1311h2_f57a4…85222651multi-build61.1%2026-07-192026-07-23
Python requests
Python 3.9, standalone OpenSSL 3.5 (uv / macOS-arm) — 3.9's wider legacy cipher default
unclassified40.7%2026-07-192026-07-22
t13d1811h2_e8a52…756fee65900e66af…79423cfixed30.5%2026-07-192026-07-21
Python requests
Python 3.9, Debian (OpenSSL 1.1.1)
32e4b881…92a769fixed30.5%2026-07-192026-07-22
Java OkHttp
JDK 17–21 — OkHttp's own restricted cipher list; same on any base image
2ca8118b…c2afcffixed20.4%2026-07-202026-07-20
t13d1515h1_8daaf…06bb82e3multi-build20.4%2026-07-232026-07-23
Google Chrome / Chromium
Chromium cipher-suite signature — Chrome, Edge, Brave, Opera; any extension permutation or version
aa5064e8…7b78bbunclassified20.4%2026-07-212026-07-21
t13d1514h1_8daaf…f7722235aa5064e8…7b78bbunclassified10.2%2026-07-212026-07-21
t13d1114h2_5e2a7…6a4e08ffmulti-build10.2%2026-07-192026-07-19
.NET HttpClient
.NET 8–9, Debian 12 (OpenSSL 3)
02d7359b…4f71e1fixed10.2%2026-07-192026-07-19
t13d121200_a538d…ad5f08736ba5ebcd…0cbc31fixed10.2%2026-07-222026-07-22
t13d1812h1_85036…e481755emulti-build10.2%2026-07-222026-07-22
t13d1515h1_8daaf…2fe8a3fb44d502d4…20e5a8unclassified10.2%2026-07-232026-07-23