User-Agent

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36

first seen 2026-06-18 17:16 · last seen 2026-11-01 02:02 · JSON

Last 7 days (36 observations)

Distinct clients per day (last 30 days, peak 9/day)

Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.

Decomposed attributes

Browser / clientBingbot 2.0
Device classbot
Declared URLhttp://www.bing.com/bingbot.htm Chrome/116.0.1938.76 Safari/537.36
Noteinferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d2013h2_2b729b4bf6f3_e24568c0d440 Match?Exact match in Thumbprint's published controlled catalog captures: winhttp 10.0.20348.1.The fingerprint page shows the full measured match list. More on the catalog.443
t13d2212h2_231e334592e8_36bf25f296df Match?Exact match in Thumbprint's published controlled catalog captures: powershell 7.6.6, powershell 7.6.9, powershell 7.6.8.The fingerprint page shows the full measured match list. More on the catalog.182
t13d1013h2_01be160bb49b_e24568c0d4407

HTTP request (JA4H)

fingerprintco-occurrences
ge20nn060000_0c07ec02b430_000000000000_000000000000428
ge20nn070000_dd525b7b56b8_000000000000_00000000000022
ge20nn040000_272467e735d1_000000000000_00000000000014
ge20nn040000_200b94e8daef_000000000000_00000000000012
ge20nn040000_a610c1346bea_000000000000_00000000000012
ge20nn040000_4fc62b8ba0b7_000000000000_0000000000009
ge20nn040000_89d3fd0d6813_000000000000_0000000000009
ge20nn040000_421e6bfdbec2_000000000000_0000000000009
ge20nn040000_bdf2d84aab57_000000000000_0000000000009
ge20nn040000_bd70857818a4_000000000000_0000000000008

HTTP/2 frames (Akamai)

fingerprintco-occurrences
2:0;4:10485760|10420225|0|m,p,a,s Match?Exact match in Thumbprint's published controlled catalog captures: winhttp 10.0.20348.1.The fingerprint page shows the full measured match list. More on the catalog.450
2:0;4:65535|67043329|0|m,s,a,p Match?Exact match in Thumbprint's published controlled catalog captures: powershell 7.6.6, powershell 7.6.9, powershell 7.6.8.The fingerprint page shows the full measured match list. More on the catalog.182

TCP SYN (p0f)

fingerprintco-occurrences
4:114+14:0:1440:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:0129
4:114+14:0:1440:mss*44,0:mss,nop,nop,sok:df,id+,ecn:0129
4:112+16:0:1440:mss*44,0:mss,nop,nop,sok:df,id+,ecn:0105
4:113+15:0:1440:mss*44,0:mss,nop,nop,sok:df,id+,ecn:0101
4:110+18:0:1440:mss*44,0:mss,nop,nop,sok:df,id+,ecn:044
4:109+19:0:1440:mss*44,0:mss,nop,nop,sok:df,id+,ecn:026
4:111+17:0:1440:mss*44,0:mss,nop,nop,sok:df,id+,ecn:025
4:112+16:0:1440:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:017
4:108+20:0:1440:mss*44,0:mss,nop,nop,sok:df,id+,ecn:014
4:113+15:0:1440:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+,ecn:012

TCP SYN (JA4T)

fingerprintco-occurrences
64240_2-1-1-4_1440_00426
64240_2-1-3-1-1-4_1440_8171

Country

fingerprintco-occurrences
US · United States632

Network (ASN)

fingerprintco-occurrences
AS8075 · Microsoft Corporation632

TLS supported groups

fingerprintco-occurrences
0018,0017 Match?Exact match in Thumbprint's published controlled catalog captures: powershell 7.6.7, powershell 5.1.26100.33648, curl 8.21.0.The fingerprint page shows the full measured match list. More on the catalog.86