Catalog session #706

java-urlconnection 1.8.0_492 on Ubuntu 26.04 — identity declared before the run, captured through the live edge.

Verificationcontrolled
Runnercontainer
Registered2026-09-05 06:29
Captured2026-09-05 06:29
Drivercapture-matrix/036e04e
Runanchors-2026-09-05-162828
Modeprod
Imagefpcap-java-urlconnection-8
Image digestsha256:50ca2d286eb23654317bfb4bc0411d2cd521ca0d50e27f7f6c2816bb5a5e2157
Matrix SHA-256945e086cae01
Raw client versionopenjdk version "1.8.0_492"
Requested version8u492-b09

Captures (1)

The first capture is the registration page view; probe captures are the beacon hitting each configured origin with this session's correlation id — for browsers that is how one session records both the TCP and QUIC stacks.

2026-09-05 06:29 · page · tcp (HTTP/1.1) · thumbprint.me

TLS ClientHello (JA4) t13d330900_80cecea31fe6_9da38b6fd1bc
HTTP request (JA4H) ge11nn040000_5192a00d9159_000000000000_000000000000
TCP SYN (p0f) 4:54+10:0:1460:mss*44,10:mss,sok,ts,nop,ws:df,id+:0
TCP SYN (JA4T) 64240_2-4-8-1-3_1460_10
User-Agent Java/1.8.0_492
verbatim wire tuple (immutable evidence, includes raw variants)
{
  "ja4": "t13d330900_80cecea31fe6_9da38b6fd1bc",
  "ja4_o": "t13d330900_c508bcdfbae1_6b6b1ebef3f0",
  "ja4_r": "t13d330900_002f,0032,0033,0035,0038,0039,003c,003d,0040,0067,006a,006b,009c,009d,009e,009f,00a2,00a3,00ff,1301,1302,c009,c00a,c013,c014,c023,c024,c027,c028,c02b,c02c,c02f,c030_000a,000b,000d,0017,002b,002d,0032,0033_0403,0503,0603,0804,0805,0806,0809,080a,080b,0401,0501,0601,0402,0303,0301,0302,0203,0201,0202",
  "ja4_ro": "t13d330900_1302,1301,c02c,c02b,c030,c02f,009f,00a3,009e,00a2,c024,c028,c023,c027,006b,006a,0067,0040,c00a,c014,c009,c013,0039,0038,0033,0032,009d,009c,003d,003c,0035,002f,00ff_0000,000a,000b,000d,0032,0017,002b,002d,0033_0403,0503,0603,0804,0805,0806,0809,080a,080b,0401,0501,0601,0402,0303,0301,0302,0203,0201,0202",
  "ja4h": "ge11nn040000_5192a00d9159_000000000000_000000000000",
  "ja4h_r": "ge11nn040000_User-Agent,Host,Accept,Connection__",
  "tcp_ja4t": "64240_2-4-8-1-3_1460_10",
  "tcp_p0f": "4:54+10:0:1460:mss*44,10:mss,sok,ts,nop,ws:df,id+:0",
  "tls_cipher": "TLS_AES_256_GCM_SHA384",
  "tls_version": "TLSv1.3",
  "user_agent": "Java/1.8.0_492"
}

← catalog