api.telegram.org

Read

Spread is entropy over the fingerprints reaching this domain, not over the domains a fingerprint reaches. It can’t distinguish one scraper from many people — it measures the mix of software, not who runs it.

Footprint

Client stacks reaching this name

• t13d1813h1_850…722ba4afmulti-build
  40%
• t13d3113h1_e8f…722ba4affixed
  14%
• Node.js https / axios / got (no ALPN)multi-build
  14%
• t13d3112h2_e8f…e05bbdd6fixed
  9.3%
• t13d5912h1_a33…9dd1d406fixed
  5.8%
• t13d181100_850…e481755emulti-build
  5.8%
• t13d5213h1_b26…3fb0a24cmulti-build
  3.5%
• t13d3112h1_e8f…e05bbdd6multi-build
  3.5%
• t13d3113h1_e8f…50b735cemulti-build
  2.3%
• t12d8008h1_9ce…095b7c4afixed
  1.2%
• t13d3112h1_e8f…e481755emulti-build
  1.2%

Busiest 11 client stacks on this page. Share is the fraction of this name’s observations. Many distinct fingerprints on a low-traffic name is itself worth a look; a blank JA3 is a permuting client — open the fingerprint for its variants.