User-Agent
Mozilla/5.0 (Linux; Android 13; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36
first seen 2026-08-21 13:59 · last seen 2026-09-28 01:33 · JSON
Decomposed attributes
| Browser / client | Chrome 120.0.0.0 |
| Operating system | Android 13 |
| Device class | mobile |
| Note | inferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above |
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
HTTP request (JA4H)
TCP SYN (p0f)
| fingerprint | co-occurrences |
4:56+8:0:1460:mss*29,11:mss,sok,ts,nop,ws:df,id+:0 | 5 |
4:54+10:0:1460:mss*29,9:mss,sok,ts,nop,ws:df,id+:0 | 2 |
4:51+13:0:1460:mss*29,9:mss,sok,ts,nop,ws:df,id+:0 | 1 |
4:51+13:0:1460:mss*29,11:mss,sok,ts,nop,ws:df,id+:0 | 1 |
4:55+9:0:1460:mss*29,9:mss,sok,ts,nop,ws:df,id+:0 | 1 |
4:54+10:0:1460:mss*29,12:mss,sok,ts,nop,ws:df,id+:0 | 1 |
4:55+9:0:1460:65535,12:mss,sok,ts,nop,ws:df,id+:0 | 1 |
TCP SYN (JA4T)
Country
| fingerprint | co-occurrences |
NL · Netherlands | 7 |
US · United States | 4 |
SE · Sweden | 1 |
Network (ASN)