| Transport | tcp (HTTP/2) | |
|---|
| Network | AS16509 Amazon.com, Inc. · United States (US) · Datacenter (ASN-based) · on 1 abuse blocklists · published bot range: anthropic |
stats →
country →
|
|---|
| TCP SYN (p0f) |
4:118+10:0:1460:62727,7:mss,sok,ts,nop,ws:df,id+:0 Windows?Derived from the TCP SYN initial TTL observed at the edge.64-class initial TTL is common on Unix-like stacks; 128-class is common on Windows. VPNs, proxies, tunnels, and middleboxes can replace the TCP SYN, so this is a transport-stack clue, not a client identity verdict.
| IP version | 4 |
|---|
| Initial TTL | 118+10 |
|---|
| Options length | 0 |
|---|
| MSS | 1460 |
|---|
| Window size | 62727 |
|---|
| Window scale | 7 |
|---|
| Options layout | mss,sok,ts,nop,ws |
|---|
| Quirks | df,id+ |
|---|
| Payload class | 0 |
|---|
|
stats →
|
| TCP SYN (JA4T) |
62727_2-4-8-1-3_1460_7
| TCP window | 62727 |
|---|
| Option kinds | 2-4-8-1-3 |
|---|
| MSS | 1460 |
|---|
| Window scale | 7 |
|---|
|
stats →
|
| QUIC transport params |
not available on this connection
|
|
| TLS ClientHello (JA4) |
t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3 Match?Exact match in Thumbprint's published controlled catalog captures: rust-reqwest 0.12.28.The fingerprint page shows the full measured match list. More on the catalog.
| Protocol | t (TLS over TCP) |
|---|
| TLS version | 13 (TLS 1.3) |
|---|
| SNI | d (domain) |
|---|
| Cipher count | 10 |
|---|
| Extension count | 11 |
|---|
| ALPN | h2 |
|---|
| Ciphers | 00ff, 1301, 1302, 1303, c02b, c02c, c02f, c030, cca8, cca9 |
|---|
| Extensions | 0005, 000a, 000b, 000d, 0017, 0023, 002b, 002d, 0033 |
|---|
| Signature algorithms | 0503, 0403, 0807, 0806, 0805, 0804, 0601, 0501, 0401 |
|---|
|
stats →
|
| TLS ClientHello (JA4_o) |
t13d1011h2_b9b30c653583_4287bca50843
| Variant | original ordering — cipher and extension hashes computed over the lists as sent, not sorted |
|---|
| Stability | clients that randomize ClientHello ordering (e.g. Chrome) change this value per connection, so it is shown for context but not tracked as a population key |
|---|
|
|
| HTTP/2 frames (Akamai) |
2:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p Match?Exact match in Thumbprint's published controlled catalog captures: rust-reqwest 0.13.4, rust-reqwest 0.12.28, rust-hyper 1.11.0, +1 more.The fingerprint page shows the full measured match list. More on the catalog.
| SETTINGS 2 (ENABLE_PUSH) | 0 |
|---|
| SETTINGS 4 (INITIAL_WINDOW_SIZE) | 2097152 |
|---|
| SETTINGS 5 (MAX_FRAME_SIZE) | 16384 |
|---|
| SETTINGS 6 (MAX_HEADER_LIST_SIZE) | 16384 |
|---|
| WINDOW_UPDATE | 5177345 |
|---|
| PRIORITY frames | 0 |
|---|
| Pseudo-header order | m (:method), s (:scheme), a (:authority), p (:path) |
|---|
|
stats →
|
| HTTP request (JA4H) |
ge20nn030000_80b089f68b8e_000000000000_000000000000
| Method | ge (GET) |
|---|
| HTTP version | 20 (HTTP/2) |
|---|
| Cookie | no |
|---|
| Referer | no |
|---|
| Header count | 3 |
|---|
| Accept-Language | 0000 (none) |
|---|
| Header order | accept, user-agent, accept-encoding |
|---|
| Header-order hash | 80b089f68b8e |
|---|
|
stats →
|
| User-Agent |
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
| Browser / client | ClaudeBot 1.0 |
|---|
| Device class | bot |
|---|
| Note | inferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above |
|---|
|
stats →
|
Your browser is now probing this site over each configured origin (TCP/TLS and QUIC where supported) with a shared one-time correlation id, so the observatory can associate the same client's stacks across transports.