Hi.
It depends.
some are generated, some are static, but possible to change.
There are so many of them, there is no one answer.
ZennoPoster fingerprints are not really right to tell.
It is browser fingerprints.
You can start with such page:
HTTP Header Information - BrowserSpy.dk
there are hundreds of examples
Use google to find more pages like this and collect and investigate.
Let me tell You right away, it is a complicated task when You dig in. As based on that all bot protections are developed on sites
Good luck.