Catalog session #686
curl 8.7.1 on macOS 26.5.2 — identity declared before the run, captured through the live edge.
| Verification | controlled |
|---|---|
| Runner | ci |
| Registered | 2026-09-01 01:04 |
| Captured | 2026-09-01 01:04 |
| Driver | capture-ci/d117e46 |
| Run | monthly-2026-09-01-104054 |
| Mode | prod |
| Runner | github-actions |
| Image | macos26/20260728.0273.1 |
| Matrix SHA-256 | 23f7c2d05d4f |
| Raw client version | curl 8.7.1 (x86_64-apple-darwin25.0) libcurl/8.7.1 (SecureTransport) LibreSSL/3.3.6 zlib/1.2.12 nghttp2/1.68.1 |
Captures (1)
The first capture is the registration page view; probe captures are the beacon hitting each configured origin with this session's correlation id — for browsers that is how one session records both the TCP and QUIC stacks.
2026-09-01 01:04 · page · tcp (HTTP/2) · thumbprint.me
| TLS ClientHello (JA4) | t13d4907h2_0d8feac7bc37_7395dae3b2f3 |
|---|---|
| HTTP request (JA4H) | ge20nn020000_5594a17e7e7e_000000000000_000000000000 |
| HTTP/2 frames (Akamai) | 3:100;4:10485760;2:0|1048510465|0|m,s,a,p |
| TCP SYN (p0f) | 4:49+15:0:1460:65535,6:mss,nop,ws,nop,nop,ts,sok,eol+1:id-:0 |
| TCP SYN (JA4T) | 65535_2-1-3-1-1-8-4-0-0_1460_6 |
| User-Agent | curl/8.7.1 |
verbatim wire tuple (immutable evidence, includes raw variants)
{
"akamai_h2": "3:100;4:10485760;2:0|1048510465|0|m,s,a,p",
"alpn": "h2",
"ja4": "t13d4907h2_0d8feac7bc37_7395dae3b2f3",
"ja4_o": "t13d4907h2_2677ac475d6b_c6f9150fbe3b",
"ja4_r": "t13d4907h2_0004,0005,000a,0016,002f,0033,0035,0039,003c,003d,0041,0045,0067,006b,0081,0084,0088,009c,009d,009e,009f,00ba,00be,00c0,00c4,00ff,1301,1302,1303,c007,c008,c009,c00a,c011,c012,c013,c014,c023,c024,c027,c028,c02b,c02c,c02f,c030,cca8,cca9,ccaa,ff85_000a,000b,000d,002b,0033_0806,0601,0603,0805,0501,0503,0804,0401,0403,0201,0203",
"ja4_ro": "t13d4907h2_1303,1302,1301,cca9,cca8,ccaa,c030,c02c,c028,c024,c014,c00a,009f,006b,0039,ff85,00c4,0088,0081,009d,003d,0035,00c0,0084,c02f,c02b,c027,c023,c013,c009,009e,0067,0033,00be,0045,009c,003c,002f,00ba,0041,c011,c007,0005,0004,c012,c008,0016,000a,00ff_002b,0033,0000,000b,000a,000d,0010_0806,0601,0603,0805,0501,0503,0804,0401,0403,0201,0203",
"ja4h": "ge20nn020000_5594a17e7e7e_000000000000_000000000000",
"ja4h_r": "ge20nn020000_user-agent,accept__",
"tcp_ja4t": "65535_2-1-3-1-1-8-4-0-0_1460_6",
"tcp_p0f": "4:49+15:0:1460:65535,6:mss,nop,ws,nop,nop,ts,sok,eol+1:id-:0",
"tls_cipher": "TLS_CHACHA20_POLY1305_SHA256",
"tls_version": "TLSv1.3",
"user_agent": "curl/8.7.1"
}