User-Agent

curl/8.18.0

first seen 2026-07-01 22:55 · last seen 2026-09-14 11:35 · JSON

Last 7 days (75 observations)

Distinct clients per day (last 30 days, peak 37/day)

Distinct clients are counted by IP-hash per complete UTC day — unlike observation counts this is insensitive to one chatty client, but NAT merges clients and address rotation splits them.

Decomposed attributes

Browser / client	`curl 8.18.0`
Note	`inferred from the self-declared string — a claim, not a measurement; compare with the wire fingerprints above`

Co-observed signals

Signals from other families seen in the same observation. A fingerprint spread thinly across many lower-layer signatures is a classic inconsistency signal.

TLS ClientHello (JA4)

fingerprint	co-occurrences
`t13d2013h1_2b729b4bf6f3_e24568c0d440`	86
`t13d3013h2_1d37bd780c83_8537cf56674e`	8
`t13d3513h2_bfa337485184_8d7351bd871b` Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.18.0.The fingerprint page shows the full measured match list. More on the catalog.	4
`t13d4607h2_a6ef478a285d_7395dae3b2f3`	3
`t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3` Match?Exact match in Thumbprint's published controlled catalog captures: rust-reqwest 0.12.28.The fingerprint page shows the full measured match list. More on the catalog.	2
`t13d1715h2_5b57614c22b0_5c2c66f702b0` Match?Exact match in Thumbprint's published controlled catalog captures: firefox 132.0.The fingerprint page shows the full measured match list. More on the catalog.	2
`q13d0311h3_55b375c5d22e_653d80c3fe9d` Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, chromium 149.0.7827.102, chrome 149.0.7827.102, +52 more.The fingerprint page shows the full measured match list. More on the catalog.	1
`t13d1516h2_8daaf6152771_d8a2da3f94cd` Match?Exact match in Thumbprint's published controlled catalog captures: chromium 149.0.7827.102, chrome 149.0.7827.102, chrome 149.0.7827.156, +25 more.The fingerprint page shows the full measured match list. More on the catalog.	1
`t13d3012h2_1d37bd780c83_882d495ac381` Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.21.0, curl 8.22.0, curl 8.20.0, +6 more.The fingerprint page shows the full measured match list. More on the catalog.	1
`q13d0311h3_55b375c5d22e_8ca2970c38c4`	1

HTTP request (JA4H)

fingerprint	co-occurrences
`ge11nn030000_fe444ad14866_000000000000_000000000000` Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.16.0.The fingerprint page shows the full measured match list. More on the catalog.	87
`ge20nn020000_5594a17e7e7e_000000000000_000000000000` Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.7.1, curl 8.5.0, curl 8.18.0, +9 more.The fingerprint page shows the full measured match list. More on the catalog.	22
`ge30nn020000_5594a17e7e7e_000000000000_000000000000` Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.18.0.The fingerprint page shows the full measured match list. More on the catalog.	2
`ge20nn10enus_c0017f5842e8_000000000000_000000000000`	1

HTTP/2 frames (Akamai)

fingerprint	co-occurrences
`3:100;4:65536;2:0\|1048510465\|0\|m,s,a,p` Match?Exact match in Thumbprint's published controlled catalog captures: curl 8.13.0, curl 8.18.0, curl 8.21.0, +7 more.The fingerprint page shows the full measured match list. More on the catalog.	20
`2:0;4:2097152;5:16384;6:16384\|5177345\|0\|m,s,a,p` Match?Exact match in Thumbprint's published controlled catalog captures: rust-reqwest 0.13.4, rust-reqwest 0.12.28, rust-reqwest 0.13.5, +3 more.The fingerprint page shows the full measured match list. More on the catalog.	2
`1:65536;2:0;4:6291456;6:262144\|15663105\|1:1:0:220\|m,a,s,p` Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, chromium 149.0.7827.102, chrome 149.0.7827.102, +59 more.The fingerprint page shows the full measured match list. More on the catalog.	1

TCP SYN (p0f)

fingerprint	co-occurrences
`4:112+16:0:1360:mss*44,8:mss,nop,ws,nop,nop,sok::0`	8
`4:111+17:0:1400:mss*44,8:mss,nop,ws,nop,nop,sok::0`	6
`4:112+16:0:1400:mss*44,8:mss,nop,ws,nop,nop,sok::0`	6
`4:113+15:0:1354:mss*44,8:mss,nop,ws,nop,nop,sok::0`	6
`4:111+17:0:1360:mss*44,8:mss,nop,ws,nop,nop,sok::0`	6
`4:108+20:0:1400:mss*44,8:mss,nop,ws,nop,nop,sok::0`	5
`4:112+16:0:1354:mss*44,8:mss,nop,ws,nop,nop,sok::0`	5
`4:50+14:0:1460:mss*44,9:mss,sok,ts,nop,ws:df,id+:0`	4
`4:113+15:0:1400:mss*44,8:mss,nop,ws,nop,nop,sok::0`	4
`4:47+17:0:1452:65535,8:mss,nop,ws,sok,ts:df,id+,ecn:0`	3

TCP SYN (JA4T)

fingerprint	co-occurrences
`64240_2-1-3-1-1-4_1400_8`	24
`64240_2-1-3-1-1-4_1360_8`	17
`64240_2-1-3-1-1-4_1354_8`	16
`64240_2-1-3-1-1-4_1414_8`	12
`65535_2-1-3-4-8_1452_8`	8
`64240_2-4-8-1-3_1460_9`	6
`64240_2-4-8-1-3_1460_10`	3
`64800_2-4-8-1-3_1380_10`	3
`64240_2-1-3-1-1-4_1334_8`	3
`65535_2-1-3-1-1-4_1360_8`	3

QUIC transport params

fingerprint	co-occurrences
`q11_415b770c4d96`	1
`q13_b3b195fe7bab` Match?Exact match in Thumbprint's published controlled catalog captures: chrome 150.0.7871.187, edge 151.0.4129.93, chrome 151.0.7922.170, +32 more.The fingerprint page shows the full measured match list. More on the catalog.	1

Country

fingerprint	co-occurrences
`JP` · Japan	77
`VN` · Vietnam	9
`US` · United States	8
`NL` · Netherlands	7
`IN` · India	3
`DE` · Germany	2
`GB` · United Kingdom	1
`SE` · Sweden	1
`ZA` · South Africa	1
`LT` · Lithuania	1

Network (ASN)

fingerprint	co-occurrences
`AS4713` · NTT DOCOMO BUSINESS,Inc.	34
`AS2514` · NTT PC Communications, Inc.	20
`AS4725` · SoftBank Corp.	8
`AS701` · Verizon Business	5
`AS7552` · Viettel Group	4
`AS2527` · Sony Network Communications Inc.	4
`AS18403` · FPT Telecom Company	3
`AS24560` · Bharti Airtel Ltd., Telemedia Services	3
`AS50673` · Serverius	3
`AS10013` · FreeBit Co.,Ltd.	3