User-Agent
Mozilla/5.0 (iPad; CPU OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/153.0 Mobile/15E148 Safari/604.1
first seen 2026-08-27 06:48 · last seen 2026-08-31 11:08 · JSON
Decomposed attributes
| Browser / client | Firefox 153.0 |
|---|
| Operating system | iOS 18.0 |
|---|
| Device class | tablet |
|---|
| Note | inferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above |
|---|
Co-observed signals
Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.
TLS ClientHello (JA4)
HTTP request (JA4H)
TCP SYN (p0f)
| fingerprint | co-occurrences |
|---|
4:113+15:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 | 7 |
4:108+20:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 | 5 |
4:114+14:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 | 4 |
4:115+13:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 | 4 |
4:109+19:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 | 3 |
4:107+21:0:1460:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 | 3 |
4:114+14:0:1400:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+:0 | 3 |
4:112+16:0:1460:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+:0 | 2 |
4:106+22:0:1452:mss*44,8:mss,nop,ws,nop,nop,sok:df,id+:0 | 2 |
4:108+20:0:1412:65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 | 2 |
TCP SYN (JA4T)
Country
| fingerprint | co-occurrences |
|---|
KR · South Korea | 9 |
FR · France | 8 |
LV · Latvia | 8 |
SE · Sweden | 7 |
RU · Russia | 6 |
CH · Switzerland | 5 |
BG · Bulgaria | 5 |
NO · Norway | 4 |
FI · Finland | 4 |
AU · Australia | 3 |
Network (ASN)