User-Agent

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36

first seen 2026-06-12 15:37 · last seen 2026-08-25 03:35 · JSON

Decomposed attributes

Browser / clientChrome 81.0.4044.129
Operating systemLinux x86_64
Device classdesktop
Noteinferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d4311h1_c7886603b240_a29327ec888c4
t12d280700_bbd4f008d9b2_f28add8e7af02
t13i1010h1_61a7ad8aa9b6_3a8073edd8ef1

HTTP request (JA4H)

fingerprintco-occurrences
ge11nn050000_bf64bec47a6a_000000000000_0000000000002
po11nn070000_3a980bb89322_000000000000_0000000000002
ge11nn030000_0db47b7d240d_000000000000_0000000000001
ge11nr030000_341eb0d8946c_000000000000_0000000000001
ge11nn030000_cd680697de12_000000000000_000000000000 Match?Exact match in Thumbprint's published controlled catalog captures: powershell 7.6.6, powershell 7.6.5, powershell 7.6.4, +11 more.The fingerprint page shows the full measured match list. More on the catalog.1

TCP SYN (p0f)

fingerprintco-occurrences
4:51+13:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:02
4:50+14:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:01
4:52+12:0:1460:mss*44,7:mss,sok,ts,nop,ws:df,id+:01
4:114+14:0:1360:65535,8:mss,nop,ws,nop,nop,sok:df,id+:01
4:120+8:0:1460:8192,8:mss,nop,ws,nop,nop,sok:df,id+:01
4:116+12:0:1460:8192,8:mss,nop,ws,nop,nop,sok:df,id+:01

TCP SYN (JA4T)

fingerprintco-occurrences
64240_2-4-8-1-3_1460_74
8192_2-1-3-1-1-4_1460_81

Country

fingerprintco-occurrences
US · United States7

Network (ASN)

fingerprintco-occurrences
AS14956 · RouterHosting LLC4
AS14061 · DigitalOcean, LLC2
AS4213 · Krypt Technologies1