TCP SYN (JA4T)

8192_2-1-3-1-1-4_1420_8

first seen 2026-07-12 16:20 · last seen 2026-08-12 04:35 · JSON

Decomposed attributes

TCP window8192
Option kinds2-1-3-1-1-4
MSS1420
Window scale8

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t12d860600_e18388e7f3a3_a1e9356827953

HTTP request (JA4H)

fingerprintco-occurrences
ge11nn06enus_ff6fe191b79d_000000000000_0000000000003

TCP SYN (p0f)

fingerprintco-occurrences
4:122+6:0:1420:8192,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:03

User-Agent

fingerprintco-occurrences
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.363

Country

fingerprintco-occurrences
BE · Belgium2
US · United States1

Network (ASN)

fingerprintco-occurrences
AS396982 · Google LLC3