User-Agent
Dalvik/2.1.0 (Linux; U; Android 15; sdk_gphone64_x86_64 Build/AE3A.240806.043)
first seen 2026-09-17 20:17 · last seen 2026-09-18 17:27 · JSON
Decomposed attributes
| Browser / client | Dalvik 2.1.0 |
| Operating system | Android 15 |
| Device class | mobile |
| Note | inferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above |
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
HTTP request (JA4H)
TCP SYN (p0f)
| fingerprint | co-occurrences |
4:48+16:0:1460:mss*44,10:mss,sok,ts,nop,ws:df,id+:0 | 9 |
4:54+10:0:1460:mss*44,10:mss,sok,ts,nop,ws:df,id+:0 | 6 |
4:50+14:0:1460:mss*44,10:mss,sok,ts,nop,ws:df,id+:0 | 4 |
4:49+15:0:1460:mss*44,10:mss,sok,ts,nop,ws:df,id+:0 | 2 |
TCP SYN (JA4T)
Country
| fingerprint | co-occurrences |
US · United States | 15 |
NL · Netherlands | 6 |
Network (ASN)
| fingerprint | co-occurrences |
AS132892 · Cloudflare, Inc. | 15 |
AS202623 · Cloudflare Inc | 6 |