Catalog session #641
wget2 1.99.1 on Debian 12 — identity declared before the run, captured through the live edge.
| Verification | controlled |
|---|---|
| Runner | container |
| Registered | 2026-09-01 00:42 |
| Captured | 2026-09-01 00:42 |
| Driver | capture-matrix/d04b10e |
| Run | monthly-2026-09-01-104054 |
| Mode | prod |
| Image | fpcap-wget2-debian |
| Image digest | sha256:90a2b0cc3db0f24fdf584f033d0815581293eb6f6a5cbdcfde77c98ecfff424c |
| Matrix SHA-256 | c6498282f322 |
| Raw client version | GNU Wget2 1.99.1 - multithreaded metalink/file/website downloader |
Captures (1)
The first capture is the registration page view; probe captures are the beacon hitting each configured origin with this session's correlation id — for browsers that is how one session records both the TCP and QUIC stacks.
2026-09-01 00:42 · page · tcp (HTTP/2) · thumbprint.me
| TLS ClientHello (JA4) | t13d2913h2_723694b0fccc_5671b5df5029 |
|---|---|
| HTTP request (JA4H) | ge20nn030000_c01b3bb5abd4_000000000000_000000000000 |
| HTTP/2 frames (Akamai) | 2:0|00|0|m,p,s,a |
| TCP SYN (p0f) | 4:54+10:0:1460:mss*44,10:mss,sok,ts,nop,ws,?34,nop,nop:df,id+:0 |
| TCP SYN (JA4T) | 64240_2-4-8-1-3-34-1-1_1460_10 |
| User-Agent | wget2/1.99.1 |
verbatim wire tuple (immutable evidence, includes raw variants)
{
"akamai_h2": "2:0|00|0|m,p,s,a",
"alpn": "h2",
"ja4": "t13d2913h2_723694b0fccc_5671b5df5029",
"ja4_o": "t13d2913h2_7c1bf9677551_fb833fb23a56",
"ja4_r": "t13d2913h2_002f,0033,0035,0039,009c,009d,009e,009f,1301,1302,1303,1304,c009,c00a,c013,c014,c02b,c02c,c02f,c030,c09c,c09d,c09e,c09f,c0ac,c0ad,cca8,cca9,ccaa_0005,000a,000b,000d,0015,001c,0023,002b,002d,0033,ff01_0401,0809,0804,0403,0807,0501,080a,0805,0503,0808,0601,080b,0806,0603,0201,0203",
"ja4_ro": "t13d2913h2_1302,1303,1301,1304,c02c,cca9,c0ad,c00a,c02b,c0ac,c009,c030,cca8,c014,c02f,c013,009d,c09d,0035,009c,c09c,002f,009f,ccaa,c09f,0039,009e,c09e,0033_0005,000a,000b,000d,0010,0023,0033,002b,ff01,0000,002d,001c,0015_0401,0809,0804,0403,0807,0501,080a,0805,0503,0808,0601,080b,0806,0603,0201,0203",
"ja4h": "ge20nn030000_c01b3bb5abd4_000000000000_000000000000",
"ja4h_r": "ge20nn030000_accept-encoding,accept,user-agent__",
"tcp_ja4t": "64240_2-4-8-1-3-34-1-1_1460_10",
"tcp_p0f": "4:54+10:0:1460:mss*44,10:mss,sok,ts,nop,ws,?34,nop,nop:df,id+:0",
"tls_cipher": "TLS_AES_256_GCM_SHA384",
"tls_version": "TLSv1.3",
"user_agent": "wget2/1.99.1"
}