User-Agent

Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Mobile/15E148 Safari/604.1

first seen 2026-07-26 18:15 · last seen 2026-09-30 09:32 · JSON

Decomposed attributes

Browser / clientSafari 18.0
Operating systemiOS 18.0
Device classmobile
Noteinferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d2913h1_723694b0fccc_5671b5df5029112
t13d2014h2_a09f3c656075_e42f34c56612 Match?Exact match in Thumbprint's published controlled catalog captures: safari 26.5.2, safari 26.5, safari 26.6.1, +2 more.The fingerprint page shows the full measured match list. More on the catalog.47
t13d1812h1_85036bcba153_b26ce05bbdd61
t13d3112h1_e8f1e7e78f70_b26ce05bbdd6 Match?Exact match in Thumbprint's published controlled catalog captures: php-guzzle 8.2.0, php-guzzle 8.1.0, php-guzzle 8.3.1, +12 more.The fingerprint page shows the full measured match list. More on the catalog.1
t13d2012h1_2b729b4bf6f3_36bf25f296df1
t13d1807h2_796efca44d18_7395dae3b2f31
t13d1312h2_f57a46bbacb6_f50d94e863eb Match?Exact match in Thumbprint's published controlled catalog captures: go-net/http 1.27.1, go-net/http 1.27.3, go-net/http 1.27.0, +1 more.The fingerprint page shows the full measured match list. More on the catalog.1

HTTP request (JA4H)

fingerprintco-occurrences
ge20nn08enus_1945e0741196_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: safari 26.5.2, safari 26.6.2, safari 26.4.The fingerprint page shows the full measured match list. More on the catalog.46
ge11nr11bgbg_835281d8e5d9_000000000000_00000000000012
ge11nr11lvlv_835281d8e5d9_000000000000_00000000000011
ge11nr11soso_835281d8e5d9_000000000000_0000000000007
ge11nr11eses_835281d8e5d9_000000000000_0000000000006
ge11nr11nbno_835281d8e5d9_000000000000_0000000000005
ge11nr11frfr_835281d8e5d9_000000000000_0000000000005
ge11nn11lvlv_835281d8e5d9_000000000000_0000000000005
ge11nr11enus_835281d8e5d9_000000000000_0000000000004
ge11nn11bgbg_835281d8e5d9_000000000000_0000000000004

HTTP/2 frames (Akamai)

fingerprintco-occurrences
2:0;3:100;4:2097152;8:1;9:1|10420225|0|m,s,a,p5
2:0;3:100;4:2097152;8:1;9:1|10420225|1:0:0:256|m,s,a,p4
3:100;4:65536;2:0|1048510465|0|m,s,a,p Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.13.0, curl 8.18.0, curl 8.21.0, +8 more.The fingerprint page shows the full measured match list. More on the catalog.1
2:0;4:4194304;5:1048576;6:10485760|1073741824|0|a,m,p,s Match?Exact match in Thumbprint's published controlled catalog captures: go-net/http 1.27.1, go-net/http 1.27.3, go-net/http 1.27.0, +1 more.The fingerprint page shows the full measured match list. More on the catalog.1
2:0;4:2097152;5:16384;6:16384|10420225|0|m,s,a,p1
2:0;3:100;4:2097152;8:1;9:1|10420225|3:0:0:256|m,s,a,p1
2:0;3:100;4:2097152;8:1;9:1|10420225|5:0:0:256|m,s,a,p1
2:0;3:100;4:2097152;8:1;9:1|10420225|11:0:0:256|m,s,a,p1
2:0;3:100;4:2097152;8:1;9:1|10420225|7:0:0:256|m,s,a,p1
2:0;3:100;4:2097152;8:1;9:1|10420225|19:0:0:256|m,s,a,p1

TCP SYN (p0f)

fingerprintco-occurrences
4:47+17:0:1200:mss*54,7:mss,sok,ts,nop,ws:df,id+:038
4:53+11:0:1380:mss*47,10:mss,sok,ts,nop,ws:df,id+:06
4:108+20:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:05
4:112+16:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:05
4:111+17:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:05
4:114+14:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:05
4:111+17:0:1460:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+:04
4:109+19:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:04
4:115+13:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:04
4:112+16:0:1400:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+:04

TCP SYN (JA4T)

fingerprintco-occurrences
65535_2-1-3-1-1-4_1460_839
64800_2-4-8-1-3_1200_738
64240_2-1-3-1-1-4_1460_812
65535_2-1-3-1-1-4_1452_812
64240_2-1-3-1-1-4_1452_88
65535_2-1-3-1-1-4_1412_87
64240_2-1-3-1-1-4_1412_87
64860_2-4-8-1-3_1380_106
65535_2-1-3-1-1-4_1440_85
64240_2-1-3-1-1-4_1400_85

Country

fingerprintco-occurrences
NZ · New Zealand38
BG · Bulgaria20
LV · Latvia12
ES · Spain9
FR · France6
CY · Cyprus6
NO · Norway5
GB · United Kingdom5
AU · Australia4
KR · South Korea4

Network (ASN)

fingerprintco-occurrences
AS136557 · Host Universal Pty Ltd38
AS8866 · Vivacom Bulgaria EAD9
AS57169 · EDIS GmbH6
AS1257 · Tele2 Sverige AB6
AS2119 · Telenor Norge AS4
AS3352 · TELEFONICA DE ESPANA S.A.U.4
AS57269 · DIGI SPAIN TELECOM S.A4
AS5518 · SIA Tet4
AS11562 · Net Uno, C.A.3
AS29244 · CETIN Bulgaria EAD3