QUIC transport params
q11_76f709dc036e
first seen 2026-06-25 23:39 · last seen 2026-09-09 15:24 · JSON
Last 7 days (1 observations)
Distinct clients per day (last 30 days, peak 9/day)
Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.
Decomposed attributes
| Transport-parameter count | 11 |
|---|---|
| Transport-parameter IDs | 0001, 0003, 0004, 0005, 0006, 0007, 0008, 0009, 000f, 0011, 0020 |
| QTP raw | q11_0001,0003,0004,0005,0006,0007,0008,0009,000f,0011,0020 |
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
| fingerprint | co-occurrences |
|---|---|
q13d0311h3_55b375c5d22e_653d80c3fe9d Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, chromium 149.0.7827.102, chrome 149.0.7827.102, +52 more.The fingerprint page shows the full measured match list. More on the catalog. | 106 |
HTTP request (JA4H)
| fingerprint | co-occurrences |
|---|---|
ge30nn15enus_a80081d13d36_000000000000_000000000000 | 39 |
ge30nr12enus_54b4638ab28b_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, chrome 151.0.7922.137, edge 151.0.4129.93, +36 more.The fingerprint page shows the full measured match list. More on the catalog. | 6 |
ge30nr100000_9e93078f8017_000000000000_000000000000 | 4 |
ge30nr13zhcn_b3e540f310f0_000000000000_000000000000 | 4 |
ge30nn14enus_186438911b7e_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: chromium 149.0.7827.102, chrome 149.0.7827.102, edge 149.0.4022.52, +7 more.The fingerprint page shows the full measured match list. More on the catalog. | 3 |
ge30nr14enus_4600588ae5ca_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, edge 151.0.4129.93, chrome 151.0.7922.170, +29 more.The fingerprint page shows the full measured match list. More on the catalog. | 3 |
ge30nn13enus_9519c2577190_000000000000_000000000000 | 3 |
ge30nr12ru00_54b4638ab28b_000000000000_000000000000 | 3 |
ge30nr100000_65cf54e683ea_000000000000_000000000000 | 3 |
ge30nn14huhu_186438911b7e_000000000000_000000000000 | 2 |
User-Agent
Country
| fingerprint | co-occurrences |
|---|---|
CN · China | 49 |
US · United States | 13 |
JP · Japan | 7 |
HU · Hungary | 5 |
DE · Germany | 4 |
CA · Canada | 3 |
GB · United Kingdom | 3 |
NO · Norway | 2 |
SG · Singapore | 2 |
SE · Sweden | 2 |
Network (ASN)
| fingerprint | co-occurrences |
|---|---|
AS4837 · CHINA UNICOM China169 Backbone | 24 |
AS140293 · CHINATELECOM Jiangsu province Changzhou 5G network | 12 |
AS4134 · CHINANET BACKBONE | 7 |
AS5483 · Magyar Telekom Plc. | 5 |
AS22295 · Advin Services LLC | 4 |
AS17506 · ARTERIA Networks Corporation | 4 |
AS9009 · M247 Europe SRL | 3 |
AS212238 · Datacamp Limited | 3 |
AS9808 · China Mobile Communications Group Co., Ltd. | 3 |
AS57043 · HOSTKEY B.V. | 3 |
Cross-transport links
TLS ClientHello fingerprints observed from the same client via the beacon's correlation id on the other transport (e.g. this stack over TCP ↔ that stack over QUIC).
| fingerprint | linked observations |
|---|---|
t13d1516h2_8daaf6152771_d8a2da3f94cd | 59 |
t13d2416h2_d95c37398e29_d8a2da3f94cd | 3 |