User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0
first seen 2026-06-14 01:16 · last seen 2026-08-29 10:50 · JSON
Distinct clients per day (last 30 days, peak 1/day)
Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.
Decomposed attributes
| Browser / client | Firefox 128.0 |
|---|---|
| Operating system | Windows 10.0 |
| Device class | desktop |
| Note | inferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above |
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
| fingerprint | co-occurrences |
|---|---|
t13d1516h2_8daaf6152771_33a51b5ad3c5 | 16 |
t13d131100_f57a46bbacb6_ab7e3b40a677 Match?Exact match in Thumbprint's published controlled catalog captures: go-net/http 1.26.6, go-net/http 1.26.5, go-net/http 1.26.4.The fingerprint page shows the full measured match list. More on the catalog. | 6 |
t13d1516h2_8daaf6152771_02713d6af862 Match?Exact match in Thumbprint's published controlled catalog captures: chromium 131.0.6778.33, chromium 134.0.6998.35, chromium 133.0.6943.16.The fingerprint page shows the full measured match list. More on the catalog. | 4 |
t12d130600_2d7513195f68_e51b7354d87f | 2 |
t13d1812h1_85036bcba153_d41ae481755e | 2 |
t12d210700_76e208dd3e22_f28add8e7af0 | 1 |
t12d1814h2_29a2cd9e9f10_d267a5f792d4 | 1 |
t13d3612h1_018971650b2c_58ed7828516f | 1 |
HTTP request (JA4H)
| fingerprint | co-occurrences |
|---|---|
ge20nn10enus_d353d425b0bb_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: firefox 152.0.1.The fingerprint page shows the full measured match list. More on the catalog. | 6 |
ge11nr09enus_584cf71d8dfa_000000000000_000000000000 | 4 |
ge11nr040000_e1d2031bdfea_000000000000_000000000000 | 2 |
ge11nn09enus_584cf71d8dfa_000000000000_000000000000 | 2 |
ge11nn050000_3658ef221638_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: wget 1.21.4, wget 1.21.3, wget 1.25.0.The fingerprint page shows the full measured match list. More on the catalog. | 2 |
ge20nn11ruru_3901d4197baf_000000000000_000000000000 | 2 |
ge20nn11dede_3901d4197baf_000000000000_000000000000 | 2 |
ge20nn11zhcn_3901d4197baf_000000000000_000000000000 | 2 |
ge20nn11ptbr_3901d4197baf_000000000000_000000000000 | 2 |
ge20nn11frfr_3901d4197baf_000000000000_000000000000 | 2 |
HTTP/2 frames (Akamai)
TCP SYN (p0f)
TCP SYN (JA4T)
Country
| fingerprint | co-occurrences |
|---|---|
NL · Netherlands | 20 |
US · United States | 6 |
DE · Germany | 3 |
IT · Italy | 2 |
RU · Russia | 1 |
HU · Hungary | 1 |
Network (ASN)
| fingerprint | co-occurrences |
|---|---|
AS197170 · TechTies Inc. | 20 |
AS8075 · Microsoft Corporation | 2 |
AS6939 · Hurricane Electric LLC | 2 |
AS14618 · Amazon.com, Inc. | 2 |
AS47583 · Hostinger International Limited | 2 |
AS47147 · ANEXIA Internetdienstleistungs GmbH | 2 |
AS24940 · Hetzner Online GmbH | 1 |
AS20845 · DIGI Tavkozlesi es Szolgaltato Kft. | 1 |
AS197695 · Domain names registrar REG.RU, Ltd | 1 |