User-Agent

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 Edg/101.0.1210.47

first seen 2026-07-23 19:08 · last seen 2026-10-30 06:51 · JSON

Last 7 days (3 observations)

Distinct clients per day (last 30 days, peak 2/day)

Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.

Decomposed attributes

Browser / clientEdge 101.0.1210.47
Operating systemWindows 10.0
Device classdesktop
Noteinferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d1516h2_8daaf6152771_e5627efa2ab152
q13d0312h3_55b375c5d22e_54754422746d1

HTTP request (JA4H)

fingerprintco-occurrences
ge20nn12enus_60f823d07c94_000000000000_00000000000049
ge20cr12zhcn_60f823d07c94_000000000000_0000000000002
ge30nn12enus_60f823d07c94_000000000000_0000000000001
ge20nn13enus_1a3011f1c5bf_000000000000_0000000000001

HTTP/2 frames (Akamai)

fingerprintco-occurrences
1:65536;3:1000;4:6291456;6:262144|15663105|1:1:0:256|m,a,s,p16
1:65536;3:1000;4:6291456;6:262144|15663105|3:1:0:256|m,a,s,p1
1:65536;3:1000;4:6291456;6:262144|15663105|21:1:0:256|m,a,s,p1
1:65536;3:1000;4:6291456;6:262144|15663105|5:1:0:256|m,a,s,p1
1:65536;3:1000;4:6291456;6:262144|15663105|7:1:0:256|m,a,s,p1
1:65536;3:1000;4:6291456;6:262144|15663105|11:1:0:256|m,a,s,p1
1:65536;3:1000;4:6291456;6:262144|15663105|13:1:0:256|m,a,s,p1
1:65536;3:1000;4:6291456;6:262144|15663105|15:1:0:256|m,a,s,p1
1:65536;3:1000;4:6291456;6:262144|15663105|17:1:0:256|m,a,s,p1
1:65536;3:1000;4:6291456;6:262144|15663105|19:1:0:256|m,a,s,p1

TCP SYN (p0f)

fingerprintco-occurrences
4:54+10:0:1200:mss*54,7:mss,sok,ts,nop,ws:df,id+:037
6:47+17:0:1440:mss*45,7:mss,sok,ts,nop,ws:flow:03
6:55+9:0:1440:mss*45,7:mss,sok,ts,nop,ws:flow:02
4:50+14:0:1460:32768,10:mss,nop,ws,sok,ts::02
4:51+13:0:1460:32768,10:mss,nop,ws,sok,ts::02
4:47+17:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:01
4:52+12:0:1460:mss*44,13:mss,sok,ts,nop,ws:df,id+:01
4:53+11:0:8902:mss*7,12:mss,sok,ts,nop,ws:df,id+,ecn:01
4:45+19:0:1380:65535,6:mss,nop,ws,nop,nop,ts,sok,eol+1:df:01
4:53+11:0:1424:59220,9:mss,sok,ts,nop,ws:df,id+:01

TCP SYN (JA4T)

fingerprintco-occurrences
64800_2-4-8-1-3_1200_737
64800_2-4-8-1-3_1440_75
32768_2-1-3-4-8_1460_104
64240_2-4-8-1-3_1460_71
65535_2-1-3-1-1-8-4-0-0_1440_61
64240_2-4-8-1-3_1460_131
65535_2-1-3-1-1-8-4-0-0_1380_61
62314_2-4-8-1-3_8902_121
59220_2-4-8-1-3_1424_91

QUIC transport params

fingerprintco-occurrences
q08_bae576bf37b0 Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.18.0.The fingerprint page shows the full measured match list. More on the catalog.1

Country

fingerprintco-occurrences
US · United States38
NL · Netherlands4
SE · Sweden3
FI · Finland3
HK · Hong Kong SAR China2
BR · Brazil1
CN · China1
TR · Turkey1

Network (ASN)

fingerprintco-occurrences
AS203020 · HostRoyale Technologies Pvt Ltd37
AS215125 · Church of Cyberology4
AS24940 · Hetzner Online GmbH3
AS214379 · South Park Networks LLC2
AS14061 · DigitalOcean, LLC1
AS132203 · Tencent Building, Kejizhongyi Avenue1
AS136907 · HUAWEI CLOUDS1
AS28573 · Claro NXT Telecomunicacoes Ltda1
AS9121 · Turk Telekomunikasyon Anonim Sirketi1
AS214503 · QuxLabs AB1

TLS supported groups

fingerprintco-occurrences
0a0a,001d,0017,00183