TLS ClientHello (JA4)

q13d0312h3_55b375c5d22e_c0efc70deb60

first seen 2026-07-10 04:01 · last seen 2026-09-27 13:55 · JSON

Decomposed attributes

Protocolq (QUIC)
TLS version13
SNId (domain)
Cipher count3
Extension count12
ALPNh3
Ciphers1301, 1302, 1303
Extensions000a, 000b, 000d, 0016, 0017, 002b, 002d, 0031, 0033, 0039
Signature algorithms0905, 0906, 0904, 0403, 0503, 0603, 0807, 0808, 081a, 081b, 081c, 0809, 080a, 080b, 0804, 0805, 0806, 0401, 0501, 0601
JA4_rq13d0312h3_1301,1302,1303_000a,000b,000d,0016,0017,002b,002d,0031,0033,0039_0905,0906,0904,0403,0503,0603,0807,0808,081a,081b,081c,0809,080a,080b,0804,0805,0806,0401,0501,0601
JA4_o (sample)q13d0312h3_0ce35177f2fe_b20a678897ca
JA4_ro (sample)q13d0312h3_1302,1303,1301_0039,0000,000b,000a,0010,0016,0017,0031,000d,002b,002d,0033_0905,0906,0904,0403,0503,0603,0807,0808,081a,081b,081c,0809,080a,080b,0804,0805,0806,0401,0501,0601

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

HTTP request (JA4H)

fingerprintco-occurrences
ge30nn020000_5594a17e7e7e_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.18.0.The fingerprint page shows the full measured match list. More on the catalog.3

QUIC transport params

fingerprintco-occurrences
q08_bae576bf37b0 Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.18.0.The fingerprint page shows the full measured match list. More on the catalog.3

User-Agent

fingerprintco-occurrences
curl/8.19.02
curl/8.17.01

Country

fingerprintco-occurrences
US · United States2
AT · Austria1

Network (ASN)

fingerprintco-occurrences
AS701 · Verizon Business2
AS9009 · M247 Europe SRL1