Has anyone noticed this name element? Conveniently RegExed as
Not.A.Brand
I’ve seen the forms
Not.A/Brand/8
Not_A Brand/99
Not/A)Brand/99
The first is sometimes followed by two spaces. (I block UAs with more than two, but double spaces do sometimes occur.) The only numbers I’ve seen are 8 and 99.
The element comes somewhere in the UA string, not in a consistent location. Visits are behaviorally human, IP generally but not exclusively Russia, no recurring features in the rest of the UA.
If we were allowed smileys,
this one [cosgan.de] would just about fit the bill.