Unverified50% confidenceFactExact time
User-Agent identification is when a server reads the client identifier in the HTTP request header to determine the type of visitor, but this field can be forged, so it is often combined with behavioral fingerprints (such as mouse trajectories, request timing, and TLS fingerprints).
1
Sources
50%
Confidence
Long-term
Relevance
10/17/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedUser-agent is a string field in the HTTP request header filled in by the client itself, with virtually zero cost to forge, so blocking based on user agent alone is unreliable and needs to be combined with IP verification76% similarUnverifiedThe User-Agent field in HTTP requests is declared by the client itself; the HTTP protocol has not introduced any authentication mechanism for this field, and anyone can freely forge it.72% similarUnverified如果爬虫使用的HTTP库产生的TLS指纹与宣称的User-Agent不匹配，反爬系统可立即判定请求为非人类流量69% similarUnverifiedCloaking determines whether a visitor is a review crawler or a real user by detecting the visitor's IP address, User-Agent, request header characteristics, or access frequency.69% similarUnverifiedClient authentication specifically refers to the server verifying the identity of the requesting party, as distinct from server authentication.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1053192API
curl https://kongchang.com/api/v1/knowledge/claims/1053192MCP
get_claim(id=1053192)