User-Agent

Mozilla/5.0 (Android 13; Mobile; rv:153.0) Gecko/153.0 Firefox/153.0

first seen 2026-08-19 03:40 · last seen 2026-08-31 07:13 · JSON

Distinct clients per day (last 30 days, peak 18/day)

Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.

Decomposed attributes

Browser / clientFirefox 153.0
Operating systemAndroid 13
Device classmobile
Noteinferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d1617h2_86a278354501_3cbfd9057e0d Match?Exact match in Thumbprint's published controlled catalog captures: firefox 153.0, firefox 153.0.3, firefox 152.0.3, +10 more.The fingerprint page shows the full measured match list. More on the catalog.86
q13d0315h3_55b375c5d22e_dc5437974b47 Match?Exact match in Thumbprint's published controlled catalog captures: firefox 153.0, firefox 153.0.3, firefox 154.0, +18 more.The fingerprint page shows the full measured match list. More on the catalog.1

HTTP request (JA4H)

fingerprintco-occurrences
ge20nr13deat_9e2b86631664_000000000000_0000000000009
ge20nr13jajp_9e2b86631664_000000000000_0000000000008
ge20nr13eses_9e2b86631664_000000000000_0000000000006
ge20nr13nbno_9e2b86631664_000000000000_0000000000006
ge20nr13frfr_9e2b86631664_000000000000_0000000000006
ge20nr13nlnl_9e2b86631664_000000000000_0000000000005
ge20nr13fifi_9e2b86631664_000000000000_0000000000005
ge20nr13enau_9e2b86631664_000000000000_0000000000005
ge20nr13lvlv_9e2b86631664_000000000000_0000000000004
ge20nn13ruru_9e2b86631664_000000000000_0000000000003

HTTP/2 frames (Akamai)

fingerprintco-occurrences
1:65536;2:0;4:131072;5:16384|12517377|3:0:0:42|m,p,a,s Match?Exact match in Thumbprint's published controlled catalog captures: firefox 154.0, firefox 152.0.5, firefox 152.0.1, +3 more.The fingerprint page shows the full measured match list. More on the catalog.86

TCP SYN (p0f)

fingerprintco-occurrences
4:114+14:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:07
4:112+16:0:1420:65535,8:mss,nop,ws,nop,nop,sok:df,id+:04
4:114+14:0:1400:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+:04
4:116+12:0:1460:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+:04
4:112+16:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:03
4:108+20:0:1460:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+:02
4:107+21:0:1460:65535,8:mss,nop,ws,sok,ts:df,id+:02
4:113+15:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:02
4:110+18:0:1452:65535,8:mss,nop,ws,nop,nop,sok:df,id+:02
4:116+12:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:02

TCP SYN (JA4T)

fingerprintco-occurrences
65535_2-1-3-1-1-4_1460_823
64240_2-1-3-1-1-4_1460_814
64240_2-1-3-1-1-4_1400_88
64240_2-1-3-1-1-4_1452_88
65535_2-1-3-1-1-4_1420_86
65535_2-1-3-1-1-4_1400_85
64240_2-1-3-1-1-4_1360_84
64240_2-1-3-1-1-4_1420_84
65535_2-1-3-1-1-4_1452_83
65535_2-1-3-4-8_1460_82

QUIC transport params

fingerprintco-occurrences
q12_022106b74856 Match?Exact match in Thumbprint's published controlled catalog captures: firefox 153.0, firefox 153.0.3, firefox 154.0, +25 more.The fingerprint page shows the full measured match list. More on the catalog.1

Country

fingerprintco-occurrences
AT · Austria11
JP · Japan9
ES · Spain9
NL · Netherlands7
FR · France7
AU · Australia5
RU · Russia5
FI · Finland5
SG · Singapore3
KR · South Korea3

Network (ASN)

fingerprintco-occurrences
AS8412 · T-Mobile Austria GmbH7
AS2516 · KDDI CORPORATION5
AS1136 · KPN B.V.4
AS8447 · A1 Telekom Austria AG4
AS57269 · DIGI SPAIN TELECOM S.A4
AS3352 · TELEFONICA DE ESPANA S.A.U.3
AS2518 · BIGLOBE Inc.3
AS33915 · Vodafone Libertel B.V.3
AS39891 · Saudi Telecom Company JSC3
AS5410 · Bouygues Telecom SA3