QUIC transport params

q13_382365a2166d

first seen 2026-06-11 23:07 · last seen 2026-06-23 06:37 · JSON

Decomposed attributes

Transport-parameter count13
Transport-parameter IDs0001, 0003, 0004, 0005, 0006, 0007, 0008, 0009, 000f, 001b, 0020, 4752, ff73db
QTP rawq13_0001,0003,0004,0005,0006,0007,0008,0009,000f,001b,0020,4752,ff73db

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
q13d0311h3_55b375c5d22e_653d80c3fe9d Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, chromium 149.0.7827.102, chrome 149.0.7827.102, +52 more.The fingerprint page shows the full measured match list. More on the catalog.10
q13d0311h3_55b375c5d22e_5a1f323ef56d Match?Exact match in Thumbprint's published controlled catalog captures: chromium 131.0.6778.33, chromium 134.0.6998.35, chromium 133.0.6943.16.The fingerprint page shows the full measured match list. More on the catalog.4

HTTP request (JA4H)

fingerprintco-occurrences
ge30nr13enus_82d96efe40c3_000000000000_0000000000004
ge30nn13enus_0c0d8e631bd6_000000000000_0000000000002
ge30nn14enus_22d226078255_000000000000_0000000000002
ge30nn10enus_20ac21c1ffbc_000000000000_0000000000001
ge30nn11enus_8701312ebf72_000000000000_0000000000001
ge30nr10enus_733fb0090ffa_000000000000_0000000000001
ge30nn10kkkz_20ac21c1ffbc_000000000000_0000000000001
ge30nr13enus_54728652be35_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: chromium 149.0.7827.102, chrome 149.0.7827.102, edge 149.0.4022.52, +10 more.The fingerprint page shows the full measured match list. More on the catalog.1
ge30nn130000_1dfabdb80fb3_000000000000_0000000000001

User-Agent

fingerprintco-occurrences
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/129.0.0.0 Safari/537.364
Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Mobile Safari/537.362
Mozilla/5.0 (iPhone; CPU iPhone OS 18_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/140.0.7339.122 Mobile/15E148 Safari/604.12
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.02
Mozilla/5.0 (Linux; Android 11; moto g power (2022)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.6668.100 Mobile Safari/537.361
Mozilla/5.0 (Linux; Android 11; moto g power (2022)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Mobile Safari/537.361
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 YaBrowser/26.4.0.0 Safari/537.361
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 OPR/131.0.0.0 (Edition Yx 05)1

Country

fingerprintco-occurrences
US · United States12
KZ · Kazakhstan1
IT · Italy1

Network (ASN)

fingerprintco-occurrences
AS16509 · Amazon.com, Inc.7
AS136787 · PacketHub S.A.2
AS147049 · PacketHub S.A.2
AS396982 · Google LLC1
AS47242 · Host SpA1
AS208450 · Megahost Kazakhstan TOO1

Cross-transport links

TLS ClientHello fingerprints observed from the same client via the beacon's correlation id on the other transport (e.g. this stack over TCP ↔ that stack over QUIC).

fingerprintlinked observations
t13d1516h2_8daaf6152771_d8a2da3f94cd5
t13d1516h2_8daaf6152771_02713d6af8622