User-Agent

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0

first seen 2026-06-15 12:55 · last seen 2026-10-14 15:13 · JSON

Distinct clients per day (last 30 days, peak 1/day)

Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.

Decomposed attributes

Browser / clientFirefox 124.0
Operating systemWindows 10.0
Device classdesktop
Noteinferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d131000_f57a46bbacb6_e7c285222651 Match?Exact match in Thumbprint's published controlled catalog captures: go-net/http 1.23.12.The fingerprint page shows the full measured match list. More on the catalog.2
t13d5911h1_a33745022dd6_1f22a2ca17c4 Match?Exact match in Thumbprint's published controlled catalog captures: node-fetch 23.11.1.The fingerprint page shows the full measured match list. More on the catalog.2
t13d181100_85036bcba153_d41ae481755e2
t13d1812h1_85036bcba153_b26ce05bbdd61
t12d130600_2d7513195f68_e51b7354d87f1
t12d210700_76e208dd3e22_f28add8e7af01
t13d2013h2_a09f3c656075_7f0f34a4126d Match?Exact match in Thumbprint's published controlled catalog captures: safari 26.5.2, safari 26.6.2, safari 26.4, +2 more.The fingerprint page shows the full measured match list. More on the catalog.1
t13d1312h2_f57a46bbacb6_f50d94e863eb Match?Exact match in Thumbprint's published controlled catalog captures: go-net/http 1.27.1, go-net/http 1.27.0, go-net/http 1.27.3, +1 more.The fingerprint page shows the full measured match list. More on the catalog.1
t13d131100_f57a46bbacb6_f50d94e863eb Match?Exact match in Thumbprint's published controlled catalog captures: go-net/http 1.27.1, go-net/http 1.27.3, go-net/http 1.27.0, +1 more.The fingerprint page shows the full measured match list. More on the catalog.1

HTTP request (JA4H)

fingerprintco-occurrences
ge11nn08enus_9052447a5a85_000000000000_0000000000002
ge11nr12enus_a064381e9f52_000000000000_0000000000002
ge11nn12enus_427ad2df83ec_000000000000_0000000000002
ge11nn040000_88d30a62b7ad_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: wget 1.25.0.The fingerprint page shows the full measured match list. More on the catalog.1
ge20nn08enus_1945e0741196_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: safari 26.5.2, safari 26.4, safari 26.6.2.The fingerprint page shows the full measured match list. More on the catalog.1
ge20nn04enus_a1e84a948d10_000000000000_0000000000001
ge11nn06enus_fb4afd1f380a_000000000000_0000000000001
ge11nr11zhcn_92693adcaea2_000000000000_0000000000001
ge11nr13enus_92a7a7cc3533_000000000000_0000000000001

HTTP/2 frames (Akamai)

fingerprintco-occurrences
2:0;3:100;4:2097152;9:1|10420225|0|m,s,a,p Match?Exact match in Thumbprint's published controlled catalog captures: safari 26.5.2, safari 26.6.2, safari 26.5, +2 more.The fingerprint page shows the full measured match list. More on the catalog.1
2:0;4:4194304;5:1048576;6:10485760|1073741824|0|a,m,p,s Match?Exact match in Thumbprint's published controlled catalog captures: go-net/http 1.27.1, go-net/http 1.27.0, go-net/http 1.27.3, +1 more.The fingerprint page shows the full measured match list. More on the catalog.1

TCP SYN (p0f)

fingerprintco-occurrences
4:115+13:0:1460:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+:01
4:48+16:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:01
4:51+13:0:1460:mss*29,9:mss,nop,ws:df,id+:01
4:50+14:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:01
4:53+11:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:01
4:55+9:0:1460:mss*29,9:mss,sok,ts,nop,ws:df,id+:01
4:110+18:0:1460:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:01
4:55+9:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:01
4:56+8:0:1460:mss*29,12:mss,sok,ts,nop,ws:df,id+:01
4:56+8:0:1460:mss*29,11:mss,sok,ts,nop,ws:df,id+:01

TCP SYN (JA4T)

fingerprintco-occurrences
64240_2-4-8-1-3_1460_74
64240_2-1-3-1-1-4_1460_82
65535_2-1-3-1-1-4_1460_81
64240_2-1-3-1-1-4_1440_81
42340_2-4-8-1-3_1460_121
42340_2-4-8-1-3_1460_111
42340_2-4-8-1-3_1460_91

Country

fingerprintco-occurrences
NL · Netherlands4
US · United States3
DE · Germany1
SG · Singapore1
FR · France1
IN · India1
MQ · Martinique1

Network (ASN)

fingerprintco-occurrences
AS48090 · TECHOFF SRV LIMITED2
AS399629 · BL Networks2
AS200373 · 3xK Tech GmbH2
AS8075 · Microsoft Corporation1
AS6939 · Hurricane Electric LLC1
AS16276 · OVH SAS1
AS31898 · Oracle Corporation1
AS20776 · Outremer Telecom SAS1
AS150303 · SoloRDP1

TLS supported groups

fingerprintco-occurrences
001d,0017,0018 Match?Exact match in Thumbprint's published controlled catalog captures: rust-reqwest 0.12.28, rust-reqwest 0.11.27, powershell 7.6.8, +1 more.The fingerprint page shows the full measured match list. More on the catalog.1