TCP SYN (JA4T)

64240_2-1-3-1-1-4_1346_8

first seen 2026-07-04 14:53 · last seen 2026-07-19 19:34 · JSON

Decomposed attributes

TCP window64240
Option kinds2-1-3-1-1-4
MSS1346
Window scale8

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d141100_cbb2034c60b8_e5728521abd47

HTTP request (JA4H)

fingerprintco-occurrences
ge11nn07enus_729fbad63700_000000000000_0000000000007

TCP SYN (p0f)

fingerprintco-occurrences
4:105+23:0:1346:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:03
4:111+17:0:1346:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:02
4:108+20:0:1346:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:01
4:112+16:0:1346:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:01

User-Agent

fingerprintco-occurrences
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.04
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363

Country

fingerprintco-occurrences
DE · Germany7

Network (ASN)

fingerprintco-occurrences
AS16509 · Amazon.com, Inc.7