HTTP/2 frames (Akamai)

1:4096;2:0;4:2147483647;5:131072;8:0;3:100;6:65536|2147418112|0|m,s,p,a

first seen 2026-07-01 06:17 · last seen 2026-09-30 09:51 · JSON

Decomposed attributes

SETTINGS{"1": 4096, "2": 0, "3": 100, "4": 2147483647, "5": 131072, "6": 65536, "8": 0}
WINDOW_UPDATE2147418112
PRIORITY frames0
Pseudo-header orderm,s,p,a

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d2812h2_a01be8c064b6_ef4b9b248d7212
t13d2812h2_a01be8c064b6_0d46a1bf4a7c3
t13d2812h2_a01be8c064b6_8e6e362c5eac2
t13d0912h2_f91f431d341e_0d46a1bf4a7c1

HTTP request (JA4H)

fingerprintco-occurrences
ge20nr14enus_8885f48a1d08_000000000000_0000000000004
ge20nn020000_5594a17e7e7e_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.7.1, curl 8.5.0, curl 8.13.0, +11 more.The fingerprint page shows the full measured match list. More on the catalog.2
ge20nn13enus_9519c2577190_000000000000_0000000000002
ge20nr12enus_54b4638ab28b_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, chrome 152.0.7977.83, chrome 151.0.7922.137, +61 more.The fingerprint page shows the full measured match list. More on the catalog.2
ge20nn15enus_134aed5f5045_000000000000_0000000000002
ge20nr16enus_dc9be680a337_000000000000_0000000000002
ge20nn14enus_c1d002e573a4_000000000000_0000000000001
ge20nn14enus_1ea4ae3ab00a_000000000000_0000000000001
ge20nr15enus_134aed5f5045_000000000000_0000000000001
ge20nn17enus_fd1470c36f37_000000000000_0000000000001

TCP SYN (p0f)

fingerprintco-occurrences
4:43+21:0:1452:mss*44,7:mss,sok,ts,nop,ws:df,id+:05
4:41+23:0:1452:mss*44,7:mss,sok,ts,nop,ws:df,id+:03
4:52+12:0:1460:mss*44,8:mss,sok,ts,nop,ws:df,id+:02
4:51+13:0:1460:mss*44,8:mss,sok,ts,nop,ws:df,id+:01
4:44+20:0:1440:mss*44,7:mss,sok,ts,nop,ws:df,id+:01
6:54+10:0:1440:65535,8:mss,nop,ws,nop,nop,sok:flow:01
4:44+20:0:1452:mss*44,7:mss,sok,ts,nop,ws:df,id+:01
4:42+22:0:1452:mss*44,7:mss,sok,ts,nop,ws:df,id+:01
4:106+22:0:1356:65535,8:mss,nop,ws,nop,nop,sok:id-:01
4:46+18:0:1380:65535,6:mss,nop,ws,nop,nop,ts,sok,eol+1:df,ecn:01

TCP SYN (JA4T)

fingerprintco-occurrences
64240_2-4-8-1-3_1452_710
64240_2-4-8-1-3_1460_83
65535_2-1-3-1-1-8-4-0-0_1380_62
64240_2-4-8-1-3_1440_71
65535_2-1-3-1-1-4_1440_81
65535_2-1-3-1-1-4_1356_81

User-Agent

fingerprintco-occurrences
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.3610
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0 Safari/537.363
curl/8.7.11
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.361
Dalvik/2.1.0 (Linux; Android 16; SM-S901N Build/BP2A.250605.031.A3; wv)1
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.361
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.361

Country

fingerprintco-occurrences
BR · Brazil10
US · United States5
TR · Turkey2
NL · Netherlands1

Network (ASN)

fingerprintco-occurrences
AS27699 · TELEFÔNICA BRASIL S.A10
AS9009 · M247 Europe SRL3
AS9121 · Turk Telekomunikasyon Anonim Sirketi2
AS8075 · Microsoft Corporation1
AS22773 · Cox Communications Inc.1
AS21928 · T-Mobile USA, Inc.1