HTTP/2 frames (Akamai)
2:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p
first seen 2026-06-12 19:36 · last seen 2026-11-01 17:32 · JSON
Last 7 days (19040 observations)
Distinct clients per day (last 30 days, peak 359/day)
Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.
Decomposed attributes
| SETTINGS | {"2": 0, "4": 2097152, "5": 16384, "6": 16384} |
|---|---|
| WINDOW_UPDATE | 5177345 |
| PRIORITY frames | 0 |
| Pseudo-header order | m,s,a,p |
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
| fingerprint | co-occurrences |
|---|---|
t13d1011h2_61a7ad8aa9b6_f9531d972513 Match?Exact match in Thumbprint's published controlled catalog captures: rust-reqwest 0.13.4, rust-hyper 1.11.0, rust-hyper 1.11.1, +1 more.The fingerprint page shows the full measured match list. More on the catalog. | 28222 |
t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3 Match?Exact match in Thumbprint's published controlled catalog captures: rust-reqwest 0.12.28.The fingerprint page shows the full measured match list. More on the catalog. | 23136 |
t13d3012h2_1d37bd780c83_8e6e362c5eac | 92 |
t13d1011h2_61a7ad8aa9b6_3a8073edd8ef | 11 |
t13d1011h2_61a7ad8aa9b6_0d308c48d2a3 Match?Exact match in Thumbprint's published controlled catalog captures: rust-reqwest 0.13.5, rust-hyper 1.11.1, rust-hyper 1.12.0.The fingerprint page shows the full measured match list. More on the catalog. | 4 |
HTTP request (JA4H)
TCP SYN (p0f)
TCP SYN (JA4T)
| fingerprint | co-occurrences |
|---|---|
64240_2-4-8-1-3_1460_7 | 28107 |
35424_2-4-8-1-3_1460_7 | 20042 |
65535_2-4-8-1-3_1390_12 | 2071 |
62727_2-4-8-1-3_1460_7 | 906 |
42600_2-4-8-1-3_1420_7 | 99 |
64860_2-4-8-1-3_1410_7 | 64 |
65535_2-4-8-1-3_1460_10 | 53 |
64240_2-4-8-1-3_1460_9 | 10 |
62587_2-4-8-1-3_1440_7 | 5 |
64240_2-4-8-1-3_1460_10 | 4 |
User-Agent
Country
| fingerprint | co-occurrences |
|---|---|
US · United States | 51352 |
FR · France | 79 |
HU · Hungary | 7 |
AU · Australia | 6 |
DE · Germany | 6 |
RO · Romania | 4 |
NL · Netherlands | 2 |
RU · Russia | 2 |
CH · Switzerland | 1 |
GB · United Kingdom | 1 |
Network (ASN)
| fingerprint | co-occurrences |
|---|---|
AS30058 · FDCservers.net | 28066 |
AS396982 · Google LLC | 20141 |
AS8075 · Microsoft Corporation | 2142 |
AS16509 · Amazon.com, Inc. | 913 |
AS199064 · QWANT SAS | 70 |
AS55286 · B2 Net Solutions Inc. | 26 |
AS27411 · Leaseweb USA, Inc. | 15 |
AS46516 · HostRoyale LLC | 15 |
AS7203 · Leaseweb USA, Inc. | 14 |
AS3215 · Orange S.A. | 9 |
TLS supported groups
| fingerprint | co-occurrences |
|---|---|
001d,0017,0018 Match?Exact match in Thumbprint's published controlled catalog captures: rust-reqwest 0.12.28, rust-reqwest 0.11.27, winhttp 10.0.20348.1, +2 more.The fingerprint page shows the full measured match list. More on the catalog. | 29697 |
11ec,001d,0017,001e,0018,0019,0100,0101 Match?Exact match in Thumbprint's published controlled catalog captures: python-httpx 0.28.1, python-requests 2.34.2, curl 8.23.0, +4 more.The fingerprint page shows the full measured match list. More on the catalog. | 30 |
11ec,001d,0017,0018 Match?Exact match in Thumbprint's published controlled catalog captures: chrome 156.0.8078.48, edge 155.0.4283.62, chrome 156.0.8078.47, +11 more.The fingerprint page shows the full measured match list. More on the catalog. | 4 |