TCP SYN (JA4T)

42300_2-4-8-1-3_1410_10

first seen 2026-09-03 21:26 · last seen 2026-10-01 22:34 · JSON

Decomposed attributes

TCP window	`42300`
Option kinds	`2-4-8-1-3`
MSS	`1410`
Window scale	`10`

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprint	co-occurrences
`t13d1516h2_8daaf6152771_d8a2da3f94cd` Match?Exact match in Thumbprint's published controlled catalog captures: chromium 149.0.7827.102, chrome 149.0.7827.102, chrome 149.0.7827.156, +25 more.The fingerprint page shows the full measured match list. More on the catalog.	12
`t12d610700_8a10cb45a794_4446390ac224`	3
`t13d311100_e8f1e7e78f70_d41ae481755e` Match?Exact match in Thumbprint's published controlled catalog captures: rust-hyper 1.11.1, rust-hyper 1.12.0, rust-hyper 1.11.0, +1 more.The fingerprint page shows the full measured match list. More on the catalog.	1

HTTP request (JA4H)

fingerprint	co-occurrences
`ge20nn10zh00_06e2da52e592_000000000000_000000000000`	7
`ge11nn040000_4f6f4aad0c1e_000000000000_000000000000`	3
`ge20nn10zh00_e1b5b4fef504_000000000000_000000000000`	2
`ge20nn10zh00_f058b30e64ca_000000000000_000000000000`	2
`ge11nn030000_69803879d94f_000000000000_000000000000`	1
`ge20nn10zh00_dfc386b48ce4_000000000000_000000000000`	1

HTTP/2 frames (Akamai)

fingerprint	co-occurrences
`1:65536;2:0;4:6291456;6:262144\|15663105\|1:1:0:256\|m,a,s,p` Match?Exact match in Thumbprint's published controlled catalog captures: chromium 131.0.6778.33, chromium 151.0.7922.34, chrome 151.0.7922.137, +60 more.The fingerprint page shows the full measured match list. More on the catalog.	12

TCP SYN (p0f)

fingerprint	co-occurrences
`4:46+18:0:1410:mss*30,10:mss,sok,ts,nop,ws:df,id+:0`	11
`4:42+22:0:1410:mss*30,10:mss,sok,ts,nop,ws:df,id+:0`	3
`4:44+20:0:1410:mss*30,10:mss,sok,ts,nop,ws:df,id+:0`	2

User-Agent

fingerprint	co-occurrences
`Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)`	15
`Mozilla/5.0`	1

Country

fingerprint	co-occurrences
`CN` · China	15
`US` · United States	1

Network (ASN)

fingerprint	co-occurrences
`AS4837` · CHINA UNICOM China169 Backbone	7
`AS23724` · IDC, China Telecommunications Corporation	5
`AS4134` · CHINANET BACKBONE	3
`AS11351` · Charter Communications Inc	1