Mozilla/5.0 (X11; Linux x86_64; rv:125.2) Gecko/20100101 Firefox/125.2
first seen 2026-08-17 22:42 · last seen 2026-08-18 14:15 · JSON
Distinct clients per day (last 30 days, peak 2/day)
Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.
Decomposed attributes
Browser / client
Firefox 125.2
Operating system
Linux x86_64
Device class
desktop
Note
inferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
fingerprint
co-occurrences
t13d1717h2_5b57614c22b0_3cbfd9057e0dMatch?Exact match in Thumbprint's published controlled catalog captures: firefox 148.0.2, firefox 144.0.2, firefox 142.0.1, +6 more.The fingerprint page shows the full measured match list. More on the catalog.