User-Agent

Mozilla/5.0 (iPhone; CPU iPhone OS 17_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Mobile/15E148 Safari/604.1

first seen 2026-08-27 04:27 · last seen 2026-09-03 12:38 · JSON

Decomposed attributes

Browser / clientSafari 17.6
Operating systemiOS 17.6
Device classmobile
Noteinferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprintco-occurrences
t13d2913h1_723694b0fccc_5671b5df5029142
t13d2613h2_2802a3db6c62_845d286b0d671

HTTP request (JA4H)

fingerprintco-occurrences
ge11nr11ruru_835281d8e5d9_000000000000_00000000000022
ge11nr11frfr_835281d8e5d9_000000000000_0000000000009
ge11nn11ruru_835281d8e5d9_000000000000_0000000000007
ge11nr11enie_835281d8e5d9_000000000000_0000000000007
ge11nr11lvlv_835281d8e5d9_000000000000_0000000000007
ge11nr11fifi_835281d8e5d9_000000000000_0000000000005
ge11nr11dadk_835281d8e5d9_000000000000_0000000000005
ge11nr11ruru_b350a6a7c155_000000000000_0000000000005
ge11nr11engb_835281d8e5d9_000000000000_0000000000004
ge11nn11frfr_835281d8e5d9_000000000000_0000000000004

HTTP/2 frames (Akamai)

fingerprintco-occurrences
4:4194304;3:100|10485760|1:0:0:255|m,s,p,a1

TCP SYN (p0f)

fingerprintco-occurrences
4:114+14:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:012
4:112+16:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:07
4:110+18:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:06
4:108+20:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:05
4:113+15:0:1460:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+:05
4:116+12:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:05
4:112+16:0:1460:mss*44,8:mss,nop,ws,sok,ts:df,id+:04
4:117+11:0:1452:mss*44,8:mss,nop,ws,sok,ts:df,id+:04
4:118+10:0:1452:mss*44,8:mss,nop,ws,sok,ts:df,id+:04
4:110+18:0:1440:65535,8:mss,nop,ws,nop,nop,sok:df,id+:03

TCP SYN (JA4T)

fingerprintco-occurrences
65535_2-1-3-1-1-4_1460_846
64240_2-1-3-1-1-4_1460_821
64240_2-1-3-4-8_1452_89
64240_2-1-3-4-8_1460_87
65535_2-1-3-1-1-4_1452_85
64240_2-1-3-1-1-4_1452_85
64240_2-1-3-4-8_1412_85
64240_2-1-3-1-1-4_1412_84
65535_2-1-3-4-8_1452_84
65535_2-1-3-1-1-4_1440_83

Country

fingerprintco-occurrences
RU · Russia35
FR · France15
IE · Ireland11
DK · Denmark9
NL · Netherlands8
US · United States7
LV · Latvia7
BG · Bulgaria5
GB · United Kingdom5
FI · Finland5

Network (ASN)

fingerprintco-occurrences
AS12389 · PJSC Rostelecom13
AS1136 · KPN B.V.7
AS6830 · Liberty Global Europe Holding B.V.6
AS1257 · Tele2 Sverige AB6
AS14593 · Space Exploration Technologies Corporation5
AS15557 · Societe Francaise Du Radiotelephone - SFR SA5
AS8866 · Vivacom Bulgaria EAD5
AS8402 · PJSC "Vimpelcom"5
AS48327 · Ray-Svyaz Ltd.5
AS7018 · AT&T Enterprises, LLC4