Every guide, comparison and detector run we have published under tls.
The TLS handshake and HTTP/2 frame order reveal what software made a request, regardless of the User-Agent header. JA3 and JA4 hash that order, which is why a copied Chrome header over a Python handshake fails before content loads.
The first run in this series to meet Cloudflare's managed challenge and PerimeterX, with the browser driven by Playwright over the DevTools protocol throughout. Cloudflare cleared 21 checks of 24 and DataDome passed every cold visit on a clean exit. PerimeterX blocked us on one target every single time. Two corrections to our own measuring method are in here as well.