The Debian 9.9 system is in a partially upgraded state due to not being able to install Prince without uninstalling other packages that rely on libcurl4.
This only appears to have happened in the last couple of weeks though. I suspect that some other packages were updated to require libcurl4, and as a result, apt also updates libcurl3 as a dependency.
On the 9.9 system:
sudo apt-cache search '^libcurl'
libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour)
libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours)
libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour)
libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)
libcurl4-doc - documentation for libcurl
libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour)
libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour)
libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour)
libghc-hxt-curl-dev - LibCurl interface for HXT
libghc-hxt-curl-doc - LibCurl interface for HXT; documentation
libghc-hxt-curl-prof - LibCurl interface for HXT; profiling libraries
lua-curl - libcURL bindings for the Lua language
lua-curl-dev - libcURL development files for the Lua language
libcurl-ocaml - OCaml curl bindings (Runtime Library)
libcurl-ocaml-dev - OCaml libcurl bindings (Development package)
ruby-ethon - libcurl wrapper using ffi
libcurl4 - easy-to-use client-side URL transfer library (OpenSSL flavour)
It is definitely still 9.9 though (as listed in /etc/debian_version, and sources are still set to stretch).
On the Debian 10 system, libcurl3 doesn't even appear as a package any more.