Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.
| Method | ge |
|---|
| HTTP version | 11 |
|---|
| Cookie | yes |
|---|
| Referer | yes |
|---|
| Header count | 7 |
|---|
| Accept-Language | 0000 |
|---|
| Header order | Origin, Accept, Content-Type, User-Agent, Host, Connection, Accept-Encoding |
|---|
| Cookie names | c_user, datr, fbl_st, fr, locale, m_pixel_ratio, pas, ps_l, ps_n, sb, wd, wl_cbv, xs |
|---|
| Header-order hash | b0d73ed11437 |
|---|
| Cookie-name hash | c00282046cf0 |
|---|
| Cookie-value hash | 5164c8a8598f |
|---|
| JA4H_r | ge11cr070000_Origin,Accept,Content-Type,User-Agent,Host,Connection,Accept-Encoding_c_user,datr,fbl_st,fr,locale,m_pixel_ratio,pas,ps_l,ps_n,sb,wd,wl_cbv,xs_5164c8a8598f |
|---|
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.