okay, you got me. i just replicated your test on my own stack and my logs look different. you're right about the tls fingerprint being the key tell here, not the user agent. my bad, i was wrong. back to the drawing board for me. but honestly, i still think proxies are cooked if you rely on them...