The main web browser detection work is done based on the User Agent provided by web browsers.
For the most part, between common sense and a Google search or two it's possible to figure out what 90% of the various User Agent fragments mean (and thus what should be displayed for users when they come along).
But every now and again I encounter User Agent fragments that I can't figure out, nor does it seem anyone else on the internet can figure out.
So since I'm regularly looking at them and I want to share the knowledge, I figured this would be a good place to post all the ones that I can't figure out and perhaps someone out there in Internet Land knows what it means or can figure it out.
So, if you're trying to figure out "what does this user agent fragment mean"... then you've come to the right spot. If you can tell me what any of these mean, I'll happily give you credit for it.
There's a few user agent fragments that continue elude us in their meaning, and no amount of web searches seem to shed light on them... so we're happy to annouce that the homepage of whatismybrowser.com will now show a prompt to users who's useragents contain any of a certain list of fragments.
What better way to understand more about an unknown fragment than to ask a person who has a browser with that fragment present in their user agent, right?! Some people may not be able to give any insight, but as there's a few which keep appearing, maybe by asking users if they know anything about it we might learn something. We'll keep you posted on our progress with it.
The Facebook App (on both iOS and Android) contains a number of known and unknown fragments. We would love it if anyone can shed light on what the unknown ones refer to.
Here are two recent (September 2019) Facebook user agents, for iPhone and Android - version 238:
Mozilla/5.0 (iPhone; CPU iPhone OS 12_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 [FBAN/FBIOS;FBAV/22.214.171.124.115;FBBV/171859800;FBDV/iPhone9,3;FBMD/iPhone;FBSN/iOS;FBSV/12.4.1;FBSS/2;FBID/phone;FBLC/en_US;FBOP/5;FBRV/172564136;FBCR/AT&T]
Mozilla/5.0 (Linux; Android 9; SM-G960U Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/76.0.3809.132 Mobile Safari/537.36 [FB_IAB/FB4A;FBAV/126.96.36.199.116;]
|Facebook App Version
|Appears to indicate the platform? Much less common on recent versions of Android but still present for iOS?
|The following fragment indicates that it's on iOS - but FBSN doesn't appear for Android.
|Device - only seems to be present in the iOS App.
|"Main Device"? - Similar to "FBDV" but less info. only seems to be present in the iOS App.
|Coincides with the operating system version.
|Indicates device type, but only appears on iOS versions. update: the desktop seems to refer to "Windows Desktop"
|Unknown; appears on Android devices
|An internal build version? Only present on iOS.
|Possibly "Revision" of the code? Only present on iOS.
|The mobile carrier in use - eg AT&T. May not always be present.
Yandex's browser uses the "YaBrowser" fragment to indicate that it's the Yandex Browser (eg. YaBrowser/188.8.131.529), however we've seen lots of these user agents with another fragment: "Yowser", (eg. Yowser/2.5). We're not sure what Yowser refers to. It sounds like a portmanteau of "Yandex" and "Browser"... however the low version numbers (eg "2.5") imply that it's not referring to the browser itself but rather something else. Do you know what Yowser means in the Yandex user agent? Let us know!
Update: March 2013 - Confirmed that these four character fragments are actually Windows Vendor fragments and not anything else.
Update 2013/2014: We are continually updating these with new ones.
I have finally satisfied my strict burden of proof regarding these fragments. I now understand and can prove that these are "vendor id" or "OEM id" strings.
Recently, a helpful user contacted me to suggest that the MATBJS string may be related to the GreenBrowser browser, as he had noticed it in his own user agent when using GreenBrowser. I investigated, including installing a copy of it on a virtual machine, but my copy of GreenBrowser didn't come up with the MATBJS string. Since I'd finally gotten in touch with someone who actually had one of these strings in their user agent, I pressed on and asked the helpful soul to search their registry for the string (if they were comfortable doing that!). He did, and found it appeared in a special place in the registry dealing with common OS information.
He sent me a screenshot, here is the relevant part:
You can see "MATBJS" in the "OEMID" key (OEM meaning "Original Equipment Manufacturer"). To me, this confirms that MATBJS and most if not all of the similar strings are also Manufacturer IDs. I had found one or two posts from years ago on online forums which suggested this, but I aim to have the detection on this site be as authoritive as possible, so I wasn't just going to take a guess on it based on one person's opinion on a forum, especially on such a popular fragment.
Since I hadn't looked at this question in a while, reinvigorated with this bit of information, I then took to searching the web for more hints about the other strings. This is what I have come up with. Note that the strings that end in JS are almost certainly related to the ones that don't and so I have grouped them together.
|Description & opinion
|MDDR / MDDRJS
|MDDC / MDDCJS
|Dell - "http://dell.msn.com/?pc=MDDC" is a default search string
|MDDS / MDDSJS
|Dell - This thread shows a log file linking "MDDSJS" and Dell
|MAAR / MAARJS
|MASP / MASPJS
|Sony - This thread shows a log file linking "MASPJS" and Sony
|MASA / MASAJS
|Sony - This thread shows a log file linking "MASAJS" and Sony
|NP06 / NP07 / NP08 / NP09
|Asus - This thread shows a log file linking "NP06" to Asus
|ASJB / ASU2 / ASU2JS
|Asus - This thread shows a log file linking "ASJB" and Asus
|MASM / MASMJS
|MALC / MALCJS
|MALN / MALNJS
|Lenovo - This thread shows a log file linking "LCJB" and Lenovo
|This is not a Operating Platform fragment; it indicates "Mobile Information Device Profile"
|MATM / MATMJS
|Toshiba - This thread shows a log file linking "MATMJS" and Toshiba
|MATB / MATBJS
|MATP / MATPJS
|Toshiba - This thread shows a log file linking "MATPJS" and Toshiba
|Toshiba - This thread shows a log file linking "TNJB" and Toshiba
|Medion - This thread shows a log file linking "MAMD" and Medion
|MAMI / MAMIJS
|MSI - This thread shows a log file linking "MAMIJS" and MSI
|MSI - This bug report shows log files linking "MAM3" and MSI
|MAGW / MAGWJS
|Gateway - This thread shows a log file linking "MAGWJS" and Gateway
|MASE / MASEJS
|Sony - This thread shows a log file linking "MASEJS" and Sony
|MANM / MANMJS
|MAFS / MAFSJS
|Fujitsu - This thread shows a log file linking "MAFSJS" and Fujitsu
|MASB / MASBJS
|Default "Microsoft System Builder" token. Reference
|MAPB / MAPBJS
|Compaq - "http://compaq-desktop.us.msn.com/?pc=CPDTDF" is a default search string
|Compaq - "http://compaq-notebook.us.msn.com/?pc=CPNTDF is a default search string
|CMNTDF / CMDTDFJS
|HPNTDF / HPNTDFJS
|HPDTDF / HPDTDFJS
A big thanks to "Dr. Omni" for contacting me about MATBJS and re-sparking the hunt!
Thanks to Andrew for the "MATP" fragment
Thanks to Calvin for the "MASMJS" fragment
Thanks to Donald for the "MALNJS" fragment
Thanks to JB for the "FSJB" fragment
Do you know what any of the unknown fragments mean? Here are sample user agents that have the strings in them:
Update: NP02, NP07 and NP08 are now being seen in user agents as well.
Update Feb 2014: I'm now noticing it with IE 10:
As discussed, the above fragments are all referred to as "operating platform" fragments.
This is seen in User Agent strings like:
This first appeared in February 2012.
Update: November 2023. This has been identified as being Microsoft Store Download Manager Component. Thanks to Jimbo for the heads up on this one!
This is seen in User Agent strings like:
The obvious guess would be that it's iPhone; but note that they're all on Windows NT with MSIE 8, so it's not that. My guess is that it's either some kind of iPhone add on utility or more likely some kind of IP Phone/handset addition. But which one?!
Do you know what IPH means in a User Agent? Contact me.
This is seen in User Agent strings like:
All the instances of this that I've seen have been for MSIE 7 on Windows XP. I also notice that they're always grouped right next to MS-RTC S which is a part of Microsoft Live Meeting. Perhaps it's something that gets installed at the same time as Live Meeting.
This appears without a version number, typically right at the end of the user agent. For example:
Do you know what any of these mean? Contact me.
A quick Google for "F9J" strongly suggests that it refers to an Asus F9J laptop; however I've only ever seen this string in user agents which also have the "CMDTDFJS" string; which I've previously identified as relating to Compaq devices.
Obviously these are completely different manufactorers, so I can't explain this at this point. I have thousands and thousands of entries in my database for variations of this user agent, so I don't believe it's a simple quirk in someone's user agent (as which happens occasionally).
Does anyone have any ideas about this?
I've noticed a fragment similar to: ACHEETAHI/2100502020.
Google reveals there's a company called "CheetahPhone" but it doesnt seem related.
It seems to be an Android related thing:
Any ideas what this is? Because it's called "cheetah" it suggests it might be some kind of internet speed enhancer.
Update: June 2017. This has been identified as being added by Cheetah Mobile. Thanks to Thomas M for the heads up on this one!
Fragments like Creative ZENcast v1.02.12 appear in lots of user agents; they're obviously related to Creative's "ZENcast" software, but it doesn't seem to actually be from the ZENcast app itself; there are thousands of variations of this user agent; some look like Firefox, some look like Internet Explorer etc.
My hunch is that ZENcast has appended its string to the main web browser's user agent, so that when you see a user agent with "Creative ZENcast v1.02.12" in it, it is actually the normal web browser but ZENcast is trying to advertise that it's been installed on this computer. This was a somewhat common practice in the 2000s; unrelated software (or even hardware drivers!) adding fragments to the user agent.
If this was just seen with Internet Explorer user agents I'd conclude that this is exactly what it is (it's common that the software would only change Internet Explorer's user agent (done fairly easily via the Windows Registry), but the fact that it appears in Firefox user agents too suggests that it's still possibly something else (or that the ZENcast developers went to a lot of trouble to also override Firefox's user agent too!).
If anyone can confirm what causes this fragment to appear in user agents, I'd love to know! For now, I'm detecting it as an add-on.