TCP SYN (JA4T)
26883_2-4-8-1-3_8365_7
first seen 2026-06-29 23:18 · last seen 2026-07-24 00:45 · JSON
Decomposed attributes
| TCP window | 26883 |
| Option kinds | 2-4-8-1-3 |
| MSS | 8365 |
| Window scale | 7 |
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
HTTP request (JA4H)
HTTP/2 frames (Akamai)
TCP SYN (p0f)
| fingerprint | co-occurrences |
4:238+17:0:8365:26883,7:mss,sok,ts,nop,ws:df,id+:0 | 1773 |
4:240+15:0:8365:26883,7:mss,sok,ts,nop,ws:df,id+:0 | 1728 |
4:239+16:0:8365:26883,7:mss,sok,ts,nop,ws:df,id+:0 | 1643 |
4:236+19:0:8365:26883,7:mss,sok,ts,nop,ws:df,id+:0 | 94 |
4:242+13:0:8365:26883,7:mss,sok,ts,nop,ws:df,id+:0 | 7 |
4:243+12:0:8365:26883,7:mss,sok,ts,nop,ws:df,id+:0 | 7 |
4:237+18:0:8365:26883,7:mss,sok,ts,nop,ws:df,id+:0 | 1 |
User-Agent
Country
| fingerprint | co-occurrences |
US · United States | 5253 |
Network (ASN)
| fingerprint | co-occurrences |
AS714 · Apple Inc. | 5253 |