QUIC transport params

q14_3a9b21a290be

first seen 2026-06-10 23:55 · last seen 2026-06-23 21:36 · JSON

Decomposed attributes

Transport-parameter count14
Transport-parameter IDs0001, 0003, 0004, 0005, 0006, 0007, 0008, 0009, 000f, 0011, 001b, 0020, 3127, 3128
QTP rawq14_0001,0003,0004,0005,0006,0007,0008,0009,000f,0011,001b,0020,3127,3128

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
q13d0312h3_55b375c5d22e_5a06198afb93 Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, edge 151.0.4129.93, chrome 151.0.7922.170, +21 more.The fingerprint page shows the full measured match list. More on the catalog.279
q13d0311h3_55b375c5d22e_653d80c3fe9d Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, chromium 149.0.7827.102, chrome 149.0.7827.102, +52 more.The fingerprint page shows the full measured match list. More on the catalog.15
q13d0313h3_55b375c5d22e_b0954bf1abdf Match?Exact match in Thumbprint's published controlled catalog captures: chrome 152.0.7977.83, chrome 152.0.7977.65, chrome 152.0.7977.64, +4 more.The fingerprint page shows the full measured match list. More on the catalog.1

HTTP request (JA4H)

fingerprintco-occurrences
ge30nr14engb_186438911b7e_000000000000_00000000000099
ge30nr15engb_eb14703c0579_000000000000_00000000000047
ge30nr13engb_54728652be35_000000000000_00000000000046
ge30nr16engb_ce20326d9e21_000000000000_00000000000026
ge30nr14engb_b627e55c4c56_000000000000_00000000000010
ge30nn14zhcn_186438911b7e_000000000000_0000000000007
ge30nr15engb_cbb1aaa5e388_000000000000_0000000000006
ge30nn15zhcn_eb14703c0579_000000000000_0000000000006
ge30nn15engb_eb14703c0579_000000000000_0000000000004
ge30nn14engb_186438911b7e_000000000000_0000000000004

User-Agent

fingerprintco-occurrences
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36240
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.3631
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.3614
Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.363
Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.362
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.362
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.362
Mozilla/5.0 (Linux; Android 8.0.0; SM-G955U Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.361

Country

fingerprintco-occurrences
AU · Australia239
CN · China18
SE · Sweden8
EE · Estonia6
US · United States5
PL · Poland4
HR · Croatia3
DE · Germany2
UA · Ukraine2
GE · Georgia2

Network (ASN)

fingerprintco-occurrences
AS38195 · Superloop239
AS4134 · CHINANET BACKBONE17
AS61307 · AS STV5
AS39351 · 31173 Services AB5
AS5617 · Orange Polska Spolka Akcyjna3
AS44306 · OMONIA d.o.o.3
AS3301 · Telia Company AB3
AS20473 · The Constant Company, LLC2
AS12897 · ENTEGA Medianet GmbH2
AS35805 · JSC Silknet2

Cross-transport links

TLS ClientHello fingerprints observed from the same client via the beacon's correlation id on the other transport (e.g. this stack over TCP ↔ that stack over QUIC).

fingerprintlinked observations
t13d1516h2_8daaf6152771_d8a2da3f94cd52