User-Agent

Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15

first seen 2026-06-30 16:16 · last seen 2026-09-08 19:02 · JSON

Decomposed attributes

Browser / clientSafari 17.5
Operating systemmacOS 14.5
Device classdesktop
Noteinferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d151100_8daaf6152771_ab7e3b40a67763
t13d1517h2_8daaf6152771_0bf6ec06e1993
t13d1312h2_f57a46bbacb6_ab7e3b40a677 Match?Exact match in Thumbprint's published controlled catalog captures: go-net/http 1.26.6, go-net/http 1.26.10, go-net/http 1.26.9, +7 more.The fingerprint page shows the full measured match list. More on the catalog.1
t13d131200_f57a46bbacb6_9249cab70c771
t13d1910h2_765f8cc403f2_8846e450cd951

HTTP request (JA4H)

fingerprintco-occurrences
ge20nn08enus_1945e0741196_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: safari 26.5.2, safari 26.4, safari 26.6.2.The fingerprint page shows the full measured match list. More on the catalog.4
ge11nr38enus_423680453bc1_000000000000_0000000000004
ge11nr38enus_c9f28418db6b_000000000000_0000000000004
ge11nr37enus_49f6cf8b676e_000000000000_0000000000004
ge11nr27enus_fccdd18b3eb6_000000000000_0000000000004
ge11nr26enus_353319342e86_000000000000_0000000000004
ge11nr39enus_1c19b8b5959c_000000000000_0000000000003
ge11nr34enus_ee7234eb47b7_000000000000_0000000000003
ge11nr37enus_4fc02c8dab26_000000000000_0000000000003
ge11nr28enus_32e8e11f4251_000000000000_0000000000003

HTTP/2 frames (Akamai)

fingerprintco-occurrences
1:65536;2:0;3:1000;4:6291456;6:262144|15663105|1:1:0:256|m,s,p,a3
2:0;4:4194304;5:16384;6:10485760|1073741824|0|a,m,p,s Match?Exact match in Thumbprint's published controlled catalog captures: go-net/http 1.26.6, go-net/http 1.26.10, go-net/http 1.26.9, +8 more.The fingerprint page shows the full measured match list. More on the catalog.1
2:0;4:4194304;3:100|10485760|0|m,s,p,a Match?Exact match in Thumbprint's published controlled catalog captures: urlsession 6.1.2.The fingerprint page shows the full measured match list. More on the catalog.1

TCP SYN (p0f)

fingerprintco-occurrences
4:56+8:0:1460:mss*29,11:mss,sok,ts,nop,ws:df,id+:044
4:54+10:0:1460:mss*29,9:mss,sok,ts,nop,ws:df,id+:012
4:55+9:0:1460:mss*29,9:mss,sok,ts,nop,ws:df,id+:07
4:47+17:0:1460:65535,3:mss,sok,ts,nop,ws:df,id+:03
4:46+18:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:01
4:58+6:0:1420:mss*30,9:mss,sok,ts,nop,ws:df,id+:01
4:47+17:0:1460:1152,0:mss,sok,ts,nop,ws:df,id+:01

TCP SYN (JA4T)

fingerprintco-occurrences
42340_2-4-8-1-3_1460_1144
42340_2-4-8-1-3_1460_919
65535_2-4-8-1-3_1460_33
64240_2-4-8-1-3_1460_71
42600_2-4-8-1-3_1420_91
1152_2-4-8-1-3_1460_001

Country

fingerprintco-occurrences
NL · Netherlands48
US · United States20
ES · Spain1

Network (ASN)

fingerprintco-occurrences
AS48090 · TECHOFF SRV LIMITED44
AS150303 · SoloRDP15
AS197170 · TechTies Inc.4
AS142430 · DIGI VPS4
AS396982 · Google LLC1
AS12479 · Orange Espagne SA1