OptionalcipherTLS cipher suite codes in the order sent by the client. GREASE values (0xXAXA patterns) should be stripped before passing.
OptionalellipticSupported elliptic curves (named groups)
OptionalextensionsTLS extension type codes in the order encountered in the ClientHello.
OptionalheaderHTTP header names in the order they were received
OptionalheaderSelected stable header values used to detect spoofing. Suggested keys: Accept, Accept-Encoding, Accept-Language, Connection.
Optionalhttp2HTTP/2 SETTINGS frame values observed in the connection preface
Optionalja3JA3 fingerprint MD5 string
Optionalja3sJA3S (server-side) fingerprint MD5 string
Optionalja4JA4 fingerprint string (e.g. "t13d1516h2_...")
OptionalpointElliptic curve point formats
Passively collected TLS / network signals for a single request. All fields optional — gracefully scored when partially available.