TCP SYN (JA4T)

65535_2-1-1-4-1-3_1440_9

first seen 2026-06-30 04:09 · last seen 2026-10-31 04:34 · JSON

Last 7 days (2 observations)

Decomposed attributes

TCP window	`65535`
Option kinds	`2-1-1-4-1-3`
MSS	`1440`
Window scale	`9`

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprint	co-occurrences
`t12d290700_fc2078a0b8c0_8c06664c3ac5`	73

HTTP request (JA4H)

fingerprint	co-occurrences
`ge11nn06en00_3011d71998e2_000000000000_000000000000`	55
`ge11nn040000_bfa5a9b89dd6_000000000000_000000000000`	18

TCP SYN (p0f)

fingerprint	co-occurrences
`6:46+18:0:1440:65535,9:mss,nop,nop,sok,nop,ws:flow:0`	16
`6:43+21:0:1440:65535,9:mss,nop,nop,sok,nop,ws:flow:0`	13
`6:47+17:0:1440:65535,9:mss,nop,nop,sok,nop,ws:flow:0`	11
`6:42+22:0:1440:65535,9:mss,nop,nop,sok,nop,ws:flow:0`	11
`6:41+23:0:1440:65535,9:mss,nop,nop,sok,nop,ws:flow:0`	8
`6:45+19:0:1440:65535,9:mss,nop,nop,sok,nop,ws:flow:0`	7
`6:53+11:0:1440:65535,9:mss,nop,nop,sok,nop,ws:flow:0`	4
`6:52+12:0:1440:65535,9:mss,nop,nop,sok,nop,ws:flow:0`	3

User-Agent

fingerprint	co-occurrences
`Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)`	73

Country

fingerprint	co-occurrences
`FR` · France	55
`FI` · Finland	18

Network (ASN)

fingerprint	co-occurrences
`AS51167` · Contabo GmbH	55
`AS24940` · Hetzner Online GmbH	18

TLS supported groups

fingerprint	co-occurrences
`001d,0017,0018` Match?Exact match in Thumbprint's published controlled catalog captures: rust-reqwest 0.12.28, rust-reqwest 0.11.27, powershell 7.6.8, +1 more.The fingerprint page shows the full measured match list. More on the catalog.	2