HTTP/2 frames (Akamai)
1:38880;2:0;4:131072;5:16384|12517377|3:0:0:42|m,p,a,s
first seen 2026-09-02 20:46 · last seen 2026-09-03 11:18 · JSON
Decomposed attributes
| SETTINGS | {"1": 38880, "2": 0, "4": 131072, "5": 16384} |
| WINDOW_UPDATE | 12517377 |
| PRIORITY frames | 3:0:0:42 |
| Pseudo-header order | m,p,a,s |
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
HTTP request (JA4H)
TCP SYN (p0f)
| fingerprint | co-occurrences |
4:49+15:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 | 1 |
4:50+14:0:1460:65535,6:mss,sok,ts,nop,ws:df,id+:0 | 1 |
4:113+15:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 | 1 |
4:114+14:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 | 1 |
TCP SYN (JA4T)
User-Agent
Country
| fingerprint | co-occurrences |
AU · Australia | 4 |
Network (ASN)
| fingerprint | co-occurrences |
AS1221 · Telstra Limited | 4 |