QUIC transport params
q08_bae576bf37b0
first seen 2026-06-11 00:08 · last seen 2026-10-27 23:39 · JSON
Last 7 days (3 observations)
Distinct clients per day (last 30 days, peak 1/day)
Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.
Decomposed attributes
| Transport-parameter count | 8 |
|---|---|
| Transport-parameter IDs | 0004, 0005, 0006, 0007, 0008, 0009, 000f, 0011 |
| QTP raw | q08_0004,0005,0006,0007,0008,0009,000f,0011 |
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
| fingerprint | co-occurrences |
|---|---|
q13d0413h3_9caa18292e23_23fce1e67d98 Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.18.0.The fingerprint page shows the full measured match list. More on the catalog. | 67 |
q13d0312h3_55b375c5d22e_c0efc70deb60 | 3 |
q13d0313h3_55b375c5d22e_19cb63ff0383 | 3 |
q13d0311h3_55b375c5d22e_f2a83c8e78ae Match?Exact match in Thumbprint's published controlled catalog captures: safari 26.5.2, urlsession 6.1.2, urlsession 6.3.3, +5 more.The fingerprint page shows the full measured match list. More on the catalog. | 2 |
q13d0313h3_55b375c5d22e_05ee7905d32b | 2 |
q13d0312h3_55b375c5d22e_54754422746d | 2 |
q13d0308h3_55b375c5d22e_1b7ced03430d | 2 |
q13i0412h3_9caa18292e23_23fce1e67d98 | 1 |
q13d0313h3_55b375c5d22e_e82d22cd3841 | 1 |
q13d0313h3_55b375c5d22e_5d09bd47253c | 1 |
HTTP request (JA4H)
| fingerprint | co-occurrences |
|---|---|
ge30nn020000_5594a17e7e7e_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.18.0.The fingerprint page shows the full measured match list. More on the catalog. | 35 |
ge30nn030000_042112399351_000000000000_000000000000 | 12 |
he30nn040000_1d43baa471e0_000000000000_000000000000 | 6 |
ge30nn13enus_0c2c1d640f3e_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, chrome 152.0.7977.83, edge 151.0.4129.93, +37 more.The fingerprint page shows the full measured match list. More on the catalog. | 3 |
ge30nn030000_e501dbe96746_000000000000_000000000000 | 3 |
ge30nn040000_1d43baa471e0_000000000000_000000000000 | 3 |
he30nn030000_84aeade17563_000000000000_000000000000 | 3 |
ge30nn030000_dd5957970d8a_000000000000_000000000000 | 3 |
ge30nn08enus_1945e0741196_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: safari 26.5.2, safari 26.6.2, safari 26.6.1, +1 more.The fingerprint page shows the full measured match list. More on the catalog. | 2 |
he30nn020000_5594a17e7e7e_000000000000_000000000000 | 2 |
User-Agent
Country
| fingerprint | co-occurrences |
|---|---|
AU · Australia | 68 |
US · United States | 5 |
BR · Brazil | 4 |
PL · Poland | 3 |
DE · Germany | 1 |
SE · Sweden | 1 |
FR · France | 1 |
AT · Austria | 1 |
Network (ASN)
| fingerprint | co-occurrences |
|---|---|
AS38195 · Superloop | 68 |
AS28573 · Claro NXT Telecomunicacoes Ltda | 4 |
AS16276 · OVH SAS | 3 |
AS701 · Verizon Business | 3 |
AS24940 · Hetzner Online GmbH | 1 |
AS9009 · M247 Europe SRL | 1 |
AS20473 · The Constant Company, LLC | 1 |
AS12322 · Free SAS | 1 |
AS906 · DMIT Cloud Services | 1 |
AS214379 · South Park Networks LLC | 1 |
TLS supported groups
| fingerprint | co-occurrences |
|---|---|
11ec,11eb,11ed,001d,0017,001e,0019,0018,0100,0101,0102,0103,0104 | 6 |
Cross-transport links
TLS ClientHello fingerprints observed from the same client via the beacon's correlation id on the other transport (e.g. this stack over TCP ↔ that stack over QUIC).
| fingerprint | linked observations |
|---|---|
t13d4113h2_8ae0994cad11_86f67be995ff | 13 |