QUIC transport params

q12_f0adfafd9e45

first seen 2026-06-17 18:17 · last seen 2026-06-23 18:09 · JSON

Decomposed attributes

Transport-parameter count12
Transport-parameter IDs0001, 0003, 0004, 0005, 0006, 0007, 0008, 0009, 000f, 0011, 001b, 0020
QTP rawq12_0001,0003,0004,0005,0006,0007,0008,0009,000f,0011,001b,0020

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
q13d0311h3_55b375c5d22e_653d80c3fe9d Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, chromium 149.0.7827.102, chrome 149.0.7827.102, +52 more.The fingerprint page shows the full measured match list. More on the catalog.12

HTTP request (JA4H)

fingerprintco-occurrences
ge30nr13enus_54728652be35_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: chromium 149.0.7827.102, chrome 149.0.7827.102, edge 149.0.4022.52, +10 more.The fingerprint page shows the full measured match list. More on the catalog.2
ge30nn14ru00_186438911b7e_000000000000_0000000000002
ge30nr13ru00_54728652be35_000000000000_0000000000002
ge30nr14enus_b627e55c4c56_000000000000_0000000000001
ge30nn15ja00_13ad54285269_000000000000_0000000000001
ge30nn13zhcn_ce6fd0b7d045_000000000000_0000000000001
ge30nn14enus_186438911b7e_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: chromium 149.0.7827.102, chrome 149.0.7827.102, edge 149.0.4022.52, +7 more.The fingerprint page shows the full measured match list. More on the catalog.1
ge30nr14ja00_bc2525c1309d_000000000000_0000000000001
ge30nr15enus_6e1d031836ad_000000000000_0000000000001

User-Agent

fingerprintco-occurrences
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.362
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.362
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 OPR/132.0.0.02
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 YaBrowser/26.4.0.0 Safari/537.362
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.362
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.361
Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36 EdgA/146.0.0.01

Country

fingerprintco-occurrences
US · United States3
JP · Japan2
RU · Russia2
TH · Thailand2
BY · Belarus2
CN · China1

Network (ASN)

fingerprintco-occurrences
AS42772 · Unitary enterprise A12
AS12389 · PJSC Rostelecom2
AS45758 · Triple T Broadband Public Company Limited2
AS7018 · AT&T Enterprises, LLC2
AS2497 · Internet Initiative Japan Inc.2
AS4837 · CHINA UNICOM China169 Backbone1
AS20055 · Wholesail networks LLC1

Cross-transport links

TLS ClientHello fingerprints observed from the same client via the beacon's correlation id on the other transport (e.g. this stack over TCP ↔ that stack over QUIC).

fingerprintlinked observations
t13d1516h2_8daaf6152771_d8a2da3f94cd7