HTTP/2 frames (Akamai)

2:0;4:2097152;5:16384;6:16777216|5177345|0|m,s,a,p

first seen 2026-07-02 06:01 · last seen 2026-10-15 08:31 · JSON

Distinct clients per day (last 30 days, peak 3/day)

Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.

Decomposed attributes

SETTINGS{"2": 0, "4": 2097152, "5": 16384, "6": 16777216}
WINDOW_UPDATE5177345
PRIORITY frames0
Pseudo-header orderm,s,a,p

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d1511h2_8daaf6152771_78e6aca7449b37
t13d0911h2_e58ff226e52e_78e6aca7449b3
t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3 Match?Exact match in Thumbprint's published controlled catalog captures: rust-reqwest 0.12.28.The fingerprint page shows the full measured match list. More on the catalog.2

HTTP request (JA4H)

fingerprintco-occurrences
ge20nr12engb_54b4638ab28b_000000000000_0000000000007
ge20nr12enus_54b4638ab28b_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, chrome 152.0.7977.83, chrome 151.0.7922.137, +58 more.The fingerprint page shows the full measured match list. More on the catalog.4
ge20nr14enus_8f7cdbfc2aaa_000000000000_0000000000003
ge20nr12enus_c0858481ddaa_000000000000_0000000000003
ge20nn020000_5594a17e7e7e_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.7.1, curl 8.5.0, curl 8.13.0, +11 more.The fingerprint page shows the full measured match list. More on the catalog.2
ge20nn10engb_f7ad313dcc59_000000000000_0000000000002
ge20nr09engb_d05bf764aa1e_000000000000_0000000000002
ge20nr13engb_0c2c1d640f3e_000000000000_0000000000002
ge20nr13enus_9e6b72014148_000000000000_0000000000002
ge20nn05*000_e4c3cbf5af3f_000000000000_0000000000002

TCP SYN (p0f)

fingerprintco-occurrences
6:48+16:0:1360:65535,13:mss,sok,ts,nop,ws:flow:09
6:57+7:0:1360:65535,13:mss,sok,ts,nop,ws:flow:06
6:53+11:0:1360:65535,13:mss,sok,ts,nop,ws:flow:05
6:46+18:0:1360:65535,13:mss,sok,ts,nop,ws:flow:04
6:51+13:0:1360:65535,13:mss,sok,ts,nop,ws:flow:03
4:52+12:0:1380:65535,13:mss,sok,ts,nop,ws:df,id+:03
6:54+10:0:1360:65535,13:mss,sok,ts,nop,ws:flow:03
4:54+10:0:1380:65535,13:mss,sok,ts,nop,ws:df,id+:03
4:57+7:0:1420:mss*30,7:mss,sok,ts,nop,ws:df,id+:02
6:49+15:0:1360:65535,13:mss,sok,ts,nop,ws:flow:02

TCP SYN (JA4T)

fingerprintco-occurrences
65535_2-4-8-1-3_1360_1334
65535_2-4-8-1-3_1380_136
42600_2-4-8-1-3_1420_72

User-Agent

fingerprintco-occurrences
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.3610
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.367
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.364
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36 Edg/155.0.0.04
curl/8.7.13
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 Edg/151.0.0.03
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0 Safari/605.1.153
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36 Edg/154.0.0.03
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.362
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.361

Country

fingerprintco-occurrences
US · United States11
TH · Thailand9
AU · Australia5
GB · United Kingdom4
ES · Spain4
NL · Netherlands3
BR · Brazil3
NZ · New Zealand3

Network (ASN)

fingerprintco-occurrences
AS13335 · Cloudflare, Inc.40
AS396982 · Google LLC2

TLS supported groups

fingerprintco-occurrences
11ec,6399,001d,fe32,0017,0018,001913