TCP SYN (JA4T)

64800_2-4-8-1-3_1320_8

first seen 2026-08-21 09:01 · last seen 2026-08-27 01:01 · JSON

Decomposed attributes

TCP window64800
Option kinds2-4-8-1-3
MSS1320
Window scale8

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d301200_1d37bd780c83_ecd0401ec68b2

HTTP request (JA4H)

fingerprintco-occurrences
ge11nn06enus_c11ebffaa84b_000000000000_0000000000002

TCP SYN (p0f)

fingerprintco-occurrences
6:45+19:0:1320:mss*45,8:mss,sok,ts,nop,ws:flow:01
6:47+17:0:1320:mss*45,8:mss,sok,ts,nop,ws:flow:01

User-Agent

fingerprintco-occurrences
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.362

Country

fingerprintco-occurrences
GB · United Kingdom2

Network (ASN)

fingerprintco-occurrences
AS210644 · AEZA GROUP LLC2