From b1620e4d92de35a3da05936aa26ae8b29b4b1796 Mon Sep 17 00:00:00 2001
From: WeebDataHoarder <57538841+WeebDataHoarder@users.noreply.github.com>
Date: Sun, 13 Apr 2025 17:29:14 +0200
Subject: [PATCH] Target alpn-less scrapers

---
 examples/forgejo.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/examples/forgejo.yml b/examples/forgejo.yml
index ec408f5..4c455c5 100644
--- a/examples/forgejo.yml
+++ b/examples/forgejo.yml
@@ -227,8 +227,8 @@ conditions:
     - 'userAgent.startsWith("reqwest/")'
 
   is-suspicious-crawler:
-    # TLS Fingerprint for specific agent
-    - 'fpJA4 == "t13d311000_e8f1e7e78f70_a29327ec888c"'
+    # TLS Fingerprint for specific agent without ALPN
+    - '(userAgent.startsWith("Mozilla/") || userAgent.startsWith("Opera/")) && fpJA4.matches("^t[0-9a-z]+00_")'
     # Old engines
     - 'userAgent.contains("Presto/") || userAgent.contains("Trident/")'
     # Old IE browsers