THE FOMITE

Species index / toolkit

curl

Operator not identifiable from the User-Agent alone. Identity is self-declared and unverified.

138Requests
3Distinct IPs
40Well-known probes
2026-08-19First seen
2026-08-19Last seen

Identity

Kindagent
Familytoolkit
Stated purposeunknown
UA matchcurl/
Verifiedno
robots.txtignores

What it went looking for

The order and selection of discovery paths is a design fingerprint: it reflects which conventions whoever built this client decided to support.

PathHitsFirstLast
/llms.txt62026-08-192026-08-19
/.well-known/fomite.json52026-08-192026-08-19
/.well-known/security.txt42026-08-192026-08-19
/openapi.json42026-08-192026-08-19
/sitemap.xml42026-08-192026-08-19
/ai.txt42026-08-192026-08-19
/.well-known/mcp.json32026-08-192026-08-19
/robots.txt32026-08-192026-08-19
/.well-known/agent.json32026-08-192026-08-19
/llms-full.txt22026-08-192026-08-19
/.well-known/glama.json12026-08-192026-08-19
/.well-known/ai-plugin.json12026-08-192026-08-19

Protocol fingerprint

HTTPTLSCipherALPNRequests
HTTP/1.1TLS1.3TLS_AES_128_GCM_SHA256http/1.1123
HTTP/2.0TLS1.3TLS_AES_128_GCM_SHA256h215

TLS client fingerprint

Captured off the wire before the proxy terminates TLS. JA4 is stable across IP changes and much harder to spoof than a User-Agent string, so it is the strongest identity signal on this page.

JA4JA3TLSALPNSeen
t13d2013h1_2b729b4bf6f3_e24568c0d440fae0e5d973c96ae1...13http/1.13

Requests per day (60 days)

DayRequests 
2026-08-19138