User-Agent
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/123.0.6312.118 Safari/534.24 XiaoMi/MiuiBrowser/14.47.1-gn
first seen 2026-09-20 23:12 · last seen 2026-09-20 23:12 · JSON
Decomposed attributes
| Browser / client | Miui Browser 14.47.1-gn |
|---|---|
| Operating system | Linux x86_64 |
| Device class | mobile |
| Note | inferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above |
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
| fingerprint | co-occurrences |
|---|---|
q13d0311h3_55b375c5d22e_5a1f323ef56d Match?Exact match in Thumbprint's published controlled catalog captures: chromium 131.0.6778.33, chromium 134.0.6998.35, chromium 133.0.6943.16.The fingerprint page shows the full measured match list. More on the catalog. | 2 |
t13d1516h2_8daaf6152771_02713d6af862 Match?Exact match in Thumbprint's published controlled catalog captures: chromium 131.0.6778.33, chromium 134.0.6998.35, chromium 133.0.6943.16.The fingerprint page shows the full measured match list. More on the catalog. | 1 |
HTTP request (JA4H)
| fingerprint | co-occurrences |
|---|---|
ge30nn09ruru_58cd8a8d2455_000000000000_000000000000 | 1 |
ge20nr08ruru_48f5c0c9641d_000000000000_000000000000 | 1 |
ge30nr08ruru_48f5c0c9641d_000000000000_000000000000 | 1 |
HTTP/2 frames (Akamai)
| fingerprint | co-occurrences |
|---|---|
1:65536;2:0;4:6291456;6:262144|15663105|1:1:0:220|m,a,s,p Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, chromium 149.0.7827.102, chrome 152.0.7977.83, +85 more.The fingerprint page shows the full measured match list. More on the catalog. | 1 |
TCP SYN (p0f)
| fingerprint | co-occurrences |
|---|---|
4:51+13:0:1200:mss*44,7:mss,sok,ts,nop,ws:df,id+:0 | 1 |
TCP SYN (JA4T)
| fingerprint | co-occurrences |
|---|---|
64240_2-4-8-1-3_1200_7 | 1 |
QUIC transport params
| fingerprint | co-occurrences |
|---|---|
q12_4b72b12b46e7 Match?Exact match in Thumbprint's published controlled catalog captures: chromium 133.0.6943.16, chromium 131.0.6778.33.The fingerprint page shows the full measured match list. More on the catalog. | 2 |
Country
| fingerprint | co-occurrences |
|---|---|
RU · Russia | 3 |
Network (ASN)
| fingerprint | co-occurrences |
|---|---|
AS12389 · PJSC Rostelecom | 3 |
Cross-transport links
TLS ClientHello fingerprints observed from the same client via the beacon's correlation id on the other transport (e.g. this stack over TCP ↔ that stack over QUIC).
| fingerprint | linked observations |
|---|---|
t13d1516h2_8daaf6152771_02713d6af862 | 1 |
q13d0311h3_55b375c5d22e_5a1f323ef56d | 1 |