User-Agent

curl/8.7.1

first seen 2026-06-15 10:59 · last seen 2026-09-16 12:22 · JSON

Last 7 days (19 observations)

Distinct clients per day (last 30 days, peak 93/day)

Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.

Decomposed attributes

Browser / client	`curl 8.7.1`
Note	`inferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above`

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprint	co-occurrences
`t13d4907h2_0d8feac7bc37_7395dae3b2f3` Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.7.1.The fingerprint page shows the full measured match list. More on the catalog.	229
`t13d1011h2_18ef40b21276_879711aa9f16`	45
`t13d2012h1_2b729b4bf6f3_9e7b989ebec8`	7
`t13d1714h1_5b57614c22b0_43ade6aba3df`	6
`t13d1516h2_8daaf6152771_d8a2da3f94cd` Match?Exact match in Thumbprint's published controlled catalog captures: chromium 149.0.7827.102, chrome 149.0.7827.102, chrome 149.0.7827.156, +25 more.The fingerprint page shows the full measured match list. More on the catalog.	4
`t13d691200_8b2139ff7677_0ceea7c49f79`	2
`t13d6913h2_8b2139ff7677_0ceea7c49f79`	2
`t13d3012h1_1d37bd780c83_8e6e362c5eac`	1
`t13d4907h1_0d8feac7bc37_7395dae3b2f3`	1
`t13d201200_2b729b4bf6f3_e24568c0d440`	1

HTTP request (JA4H)

fingerprint	co-occurrences
`ge20nn020000_5594a17e7e7e_000000000000_000000000000` Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.7.1, curl 8.5.0, curl 8.18.0, +9 more.The fingerprint page shows the full measured match list. More on the catalog.	219
`ge20nn14enus_068ebe3632ec_000000000000_000000000000`	33
`po20nn15enus_6175c8d80ef7_000000000000_000000000000`	12
`ge11nn030000_fe444ad14866_000000000000_000000000000` Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.16.0.The fingerprint page shows the full measured match list. More on the catalog.	9
`ge11nn040000_217776c81665_000000000000_000000000000`	7
`ge20nn030000_042112399351_000000000000_000000000000` Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.13.0.The fingerprint page shows the full measured match list. More on the catalog.	3
`he20nn020000_5594a17e7e7e_000000000000_000000000000`	3
`ge20nn12enus_55b25983a816_000000000000_000000000000`	2
`ge20nn030000_ff50983941c1_000000000000_000000000000`	2
`ge20nn13enus_0c2c1d640f3e_000000000000_000000000000` Match?Exact match in Thumbprint's published controlled catalog captures: chrome 151.0.7922.137, chrome 151.0.7922.170, chrome 151.0.7922.108, +23 more.The fingerprint page shows the full measured match list. More on the catalog.	2

HTTP/2 frames (Akamai)

fingerprint	co-occurrences
`3:100;4:10485760;2:0\|1048510465\|0\|m,s,a,p` Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.7.1, curl 8.5.0.The fingerprint page shows the full measured match list. More on the catalog.	229
`0\|00\|0\|m,s,a,p`	45
`1:65536;2:0;4:6291456;6:262144\|15663105\|1:1:0:220\|m,a,s,p` Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, chromium 149.0.7827.102, chrome 149.0.7827.102, +59 more.The fingerprint page shows the full measured match list. More on the catalog.	4
`2:0;6:262144;4:2097152;3:100\|2031617\|0\|m,s,a,p`	2

TCP SYN (p0f)

fingerprint	co-occurrences
`4:52+12:0:1452:65535,6:mss,sok,ts,nop,ws:df,id+:0`	29
`4:53+11:0:1452:32768,0:mss,ws,sok,eol+2:df:0`	26
`4:52+12:0:1452:32768,0:mss,ws,sok,eol+2:df:0`	24
`4:53+11:0:1452:65535,6:mss,sok,ts,nop,ws:df,id+:0`	21
`4:54+10:0:1460:mss*29,12:mss,sok,ts,nop,ws:df,id+:0`	14
`4:49+15:0:1460:mss*29,12:mss,sok,ts,nop,ws:df,id+:0`	9
`4:51+13:0:1452:65535,6:mss,nop,ws,nop,nop,ts,sok,eol+1:df,ecn:0`	8
`4:50+14:0:1460:mss*29,12:mss,sok,ts,nop,ws:df,id+:0`	7
`4:46+18:0:1460:mss*29,12:mss,sok,ts,nop,ws:df,id+:0`	6
`6:52+12:0:1440:65535,6:mss,nop,ws,nop,nop,ts,sok,eol+1:ecn,flow:0`	6

TCP SYN (JA4T)

fingerprint	co-occurrences
`65535_2-4-8-1-3_1452_6`	50
`32768_2-3-4-0-0-0_1452_00`	50
`42340_2-4-8-1-3_1460_12`	26
`65535_2-1-3-1-1-8-4-0-0_1440_6`	19
`65535_2-1-3-1-1-8-4-0-0_1460_6`	18
`65535_2-1-3-1-1-8-4-0-0_1452_6`	16
`65340_2-4-8-1-3_1452_7`	9
`62727_2-4-8-1-3_1460_7`	6
`43560_2-4-8-1-3_1452_9`	5
`65535_2-1-3-1-1-8-4-0-0_1300_6`	5

Country

fingerprint	co-occurrences
`MA` · Morocco	124
`FR` · France	45
`US` · United States	37
`CN` · China	10
`JP` · Japan	9
`IL` · Israel	9
`SG` · Singapore	7
`DE` · Germany	6
`BR` · Brazil	6
`HK` · Hong Kong SAR China	5

Network (ASN)

fingerprint	co-occurrences
`AS36903` · Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM	124
`AS211590` · Bucklog SARL	45
`AS208905` · Exelera Telecom Ltd	9
`AS4134` · CHINANET BACKBONE	8
`AS16591` · Google Fiber Inc.	6
`AS28573` · Claro NXT Telecomunicacoes Ltda	6
`AS2516` · KDDI CORPORATION	6
`AS24309` · Atria Convergence Technologies Pvt. Ltd. Broadband Internet Service Provider INDIA	5
`AS14618` · Amazon.com, Inc.	4
`AS205007` · Maxim Azarov trading as eServer	4