QUIC transport params

q12_67a81e69c992

first seen 2026-06-28 20:26 · last seen 2026-09-16 07:57 · JSON

Last 7 days (3 observations)

Distinct clients per day (last 30 days, peak 2/day)

Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.

Decomposed attributes

Transport-parameter count12
Transport-parameter IDs0001, 0003, 0004, 0005, 0006, 0007, 0008, 0009, 000b, 000c, 000e, 000f
QTP rawq12_0001,0003,0004,0005,0006,0007,0008,0009,000b,000c,000e,000f

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
q13d0312h3_55b375c5d22e_c183556c78e226
q13d0311h3_55b375c5d22e_df5b9e59796825
q13d0313h3_55b375c5d22e_f902b76752af2

HTTP request (JA4H)

fingerprintco-occurrences
ge30nr030000_2601ed496936_000000000000_00000000000026
he30nn020000_5594a17e7e7e_000000000000_00000000000024
he30nn030000_042112399351_000000000000_0000000000001
ge30nn14enin_3e53a97fab85_000000000000_0000000000001
ge30nn14enin_f35fb53e650b_000000000000_0000000000001

User-Agent

fingerprintco-occurrences
quic-go HTTP/326
quic-go-HTTP/325
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.362

Country

fingerprintco-occurrences
DE · Germany31
US · United States9
GB · United Kingdom5
JP · Japan3
SG · Singapore2
IN · India2
AE · United Arab Emirates1

Network (ASN)

fingerprintco-occurrences
AS45102 · Alibaba (US) Technology Co., Ltd.26
AS12816 · Leibniz-Rechenzentrum25
AS55836 · Reliance Jio Infocomm Limited2