HTTP request (JA4H)

po11nn080000_86f5668e3d93_000000000000_000000000000

first seen 2026-07-03 03:52 · last seen 2026-08-02 16:09 · JSON

Decomposed attributes

Methodpo
HTTP version11
Cookieno
Refererno
Header count8
Accept-Language0000
Header orderHost, User-Agent, Content-Length, Accept, Connection, Content-Type, Mcp-Protocol-Version, Accept-Encoding
Header-order hash86f5668e3d93
Cookie-name hash000000000000
Cookie-value hash000000000000
JA4H_rpo11nn080000_Host,User-Agent,Content-Length,Accept,Connection,Content-Type,Mcp-Protocol-Version,Accept-Encoding__

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d3515h1_8f004308c246_5c2c66f702b0110
t13d351400_8f004308c246_5c2c66f702b02

TCP SYN (p0f)

fingerprintco-occurrences
4:56+8:0:1460:mss*29,9:mss,sok,ts,nop,ws:df,id+:056
4:56+8:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:052
4:57+7:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:02
4:57+7:0:1460:mss*29,9:mss,sok,ts,nop,ws:df,id+:02

TCP SYN (JA4T)

fingerprintco-occurrences
42340_2-4-8-1-3_1460_958
64240_2-4-8-1-3_1460_754

User-Agent

fingerprintco-occurrences
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)112

Country

fingerprintco-occurrences
GB · United Kingdom110
NL · Netherlands2

Network (ASN)

fingerprintco-occurrences
AS25369 · Hydra Communications Ltd112