HTTP request (JA4H)

ge11nn04zhcn_7ed4e0009fa1_000000000000_000000000000

first seen 2026-07-24 09:17 · last seen 2026-09-15 01:10 · JSON

Decomposed attributes

Methodge
HTTP version11
Cookieno
Refererno
Header count4
Accept-Languagezhcn
Header orderHost, Accept, Accept-Language, User-Agent
Header-order hash7ed4e0009fa1
Cookie-name hash000000000000
Cookie-value hash000000000000
JA4H_rge11nn04zhcn_Host,Accept,Accept-Language,User-Agent__

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d3113h1_e8f1e7e78f70_1b3407e2c9366

TCP SYN (p0f)

fingerprintco-occurrences
4:52+12:0:1424:42300,9:mss,sok,nop,nop,nop,nop,nop,nop,nop,nop,nop,nop,nop,ws:df,id+:02
4:53+11:0:1424:42300,9:mss,sok,nop,nop,nop,nop,nop,nop,nop,nop,nop,nop,nop,ws:df,id+:01
4:180+?:0:1394:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+:01
4:181+?:0:1394:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+:01
4:47+17:0:1452:65535,8:mss,nop,ws,nop,nop,sok:df,id+:01

TCP SYN (JA4T)

fingerprintco-occurrences
42300_2-4-1-1-1-1-1-1-1-1-1-1-1-3_1424_93
64240_2-1-3-1-1-4_1394_82
65535_2-1-3-1-1-4_1452_81

User-Agent

fingerprintco-occurrences
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.366

Country

fingerprintco-occurrences
HK · Hong Kong SAR China3
CN · China3

Network (ASN)

fingerprintco-occurrences
AS132203 · Tencent Building, Kejizhongyi Avenue3
AS4134 · CHINANET BACKBONE1
AS4837 · CHINA UNICOM China169 Backbone1
AS9808 · China Mobile Communications Group Co., Ltd.1