User-Agent

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15

first seen 2026-07-14 05:47 · last seen 2026-09-30 17:42 · JSON

Decomposed attributes

Browser / client	`Safari 14.1`
Operating system	`macOS 10.15.7`
Device class	`desktop`
Note	`inferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above`

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprint	co-occurrences
`t13d1812h1_85036bcba153_b26ce05bbdd6`	5
`t13d251100_b78ed14e2fd0_ab7e3b40a677`	1

HTTP request (JA4H)

fingerprint	co-occurrences
`ge11nn07enus_6f5b1826d533_000000000000_000000000000`	5
`ge11nn05en00_f3bb7aa45ec4_000000000000_000000000000`	1

TCP SYN (p0f)

fingerprint	co-occurrences
`4:106+22:0:1460:62720,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:0`	4
`4:42+22:0:1460:mss*44,10:mss,sok,ts,nop,ws:df,id+:0`	1
`4:120+8:0:8960:mss*7,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:0`	1

TCP SYN (JA4T)

fingerprint	co-occurrences
`62720_2-1-3-1-1-4_1460_8`	4
`64240_2-4-8-1-3_1460_10`	1
`62720_2-1-3-1-1-4_8960_8`	1

Country

fingerprint	co-occurrences
`AE` · United Arab Emirates	4
`SG` · Singapore	1
`GB` · United Kingdom	1

Network (ASN)

fingerprint	co-occurrences
`AS31898` · Oracle Corporation	5
`AS16276` · OVH SAS	1