Network (ASN)
AS271939
first seen 2026-08-06 15:23 · last seen 2026-08-06 15:23 · JSON
Decomposed attributes
| Network name | REDES ELIAS, C.A. |
|---|---|
| Domain | redeselias.com.ve |
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
| fingerprint | co-occurrences |
|---|---|
t13d1516h2_8daaf6152771_e5627efa2ab1 | 4 |
q13d0310h3_55b375c5d22e_cd85d2d88918 | 1 |
HTTP request (JA4H)
| fingerprint | co-occurrences |
|---|---|
ge20nr11enus_774bc4686a88_000000000000_000000000000 | 3 |
ge20nr12enus_60f823d07c94_000000000000_000000000000 | 1 |
ge30nr11enus_774bc4686a88_000000000000_000000000000 | 1 |
HTTP/2 frames (Akamai)
TCP SYN (p0f)
| fingerprint | co-occurrences |
|---|---|
4:109+19:0:1440:8192,2:mss,nop,ws,nop,nop,sok:df,id+:0 | 4 |
TCP SYN (JA4T)
| fingerprint | co-occurrences |
|---|---|
8192_2-1-3-1-1-4_1440_2 | 4 |
QUIC transport params
| fingerprint | co-occurrences |
|---|---|
q13_57e330261473 | 1 |
User-Agent
| fingerprint | co-occurrences |
|---|---|
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 | 5 |
Country
| fingerprint | co-occurrences |
|---|---|
VE · Venezuela | 5 |
Cross-transport links
TLS ClientHello fingerprints observed from the same client via the beacon's correlation id on the other transport (e.g. this stack over TCP ↔ that stack over QUIC).
| fingerprint | linked observations |
|---|---|
t13d1516h2_8daaf6152771_e5627efa2ab1 | 3 |
q13d0310h3_55b375c5d22e_cd85d2d88918 | 3 |