OK
reachable
Chrome 106 Windows
· Chrome 106.0.0 / Windows Human
Scraper
Policy:
Silent Throttle
Probability
0 %
Confidence
97 %
Risk Profile
VeryLow
Threat
None
Hit Count
7
Last Seen
now
Closest to
Chrome Desktop
Drift vs
39.0%
Fingerprint Profile
TLS Version
TLSv1.3
HTTP Protocol
HTTP/1.1
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Suspect
Headless Indicator
Low
Datacenter IP
Clean
Browser modes same browser, different modes. One row per persisted mode
| Mode | Observations | Maturity | Shift from baseline | Last seen |
|---|---|---|---|---|
| bot-raw | 800 | 800 | 0.03 (header case pattern, header order hash, accept encoding ordered) | 06:13:50 |
| signalr-negotiate | 55 | 55 | 0.39 (header case pattern, header order hash, accept encoding ordered) | 06:11:06 |
| sub-resource | 4 | 4 | 0.67 (ua family, priority, referer host family) | 22:15:08 |
| navigation | 8 | 8 | 0.34 (upgrade insecure requests, header order hash, ip subnet) | 11:58:15 |
4 modes across 867 observations. See composite browser-mode fingerprints.
Endpoints Visited (7) Click to expand · stats unavailable
| # | Path |
|---|---|
| 1 | /debug/default/view |
| 2 | /frontend_dev.php/$ |
| 3 | /rest/.env |
| 4 | /fedex/.env |
| 5 | /.env.dist |
| 6 | /live_env |
| 7 | /script/.env |
Raw Requests (7) Click to expand
| Time | Method | Path | Status | Prob | Conf | Risk Profile | Action | Time |
|---|---|---|---|---|---|---|---|---|
| 02:42:42 | GET | /debug/default/view | 200 | 90 % | 68 % | VeryHigh | Silent Throttle | 17.4ms |
| 02:42:37 | GET | /frontend_dev.php/$ | 200 | 90 % | 68 % | VeryHigh | Silent Throttle | 11.9ms |
| 02:42:21 | GET | /rest/.env | 200 | 100 % | 100 % | VeryHigh | Silent Throttle | 12.2ms |
| 02:42:09 | GET | /fedex/.env | 200 | 100 % | 100 % | VeryHigh | Silent Throttle | 11.9ms |
| 02:41:53 | GET | /.env.dist | 200 | 100 % | 100 % | VeryHigh | Silent Throttle | 11.7ms |
| 02:41:43 | GET | /live_env | 200 | 90 % | 68 % | VeryHigh | Silent Throttle | 12.3ms |
| 02:41:38 | GET | /script/.env | 200 | 100 % | 100 % | VeryHigh | Silent Throttle | 12.2ms |
Bot Probability & Confidence History
StyloBot Detection Overhead (ms)
User Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Analysis
Chrome 106 Windows on /debug/default/view - caught by UA rotation: 12 different User-Agents with identical head..., Visiting many random URLs in no logical order (random sca..., TLS connection appears normal
Detection Signals
- • UA rotation: 12 different User-Agents with identical header profile from same IP
- • Visiting many random URLs in no logical order (random scanning pattern)
- • TLS connection appears normal
- • Request patterns appear normal
- • IP appears normal: 212.30.36.xxx
Detector Contributions (18 detectors)
| Detector | Confidence Delta | Timing (ms) |
|---|---|---|
|
HeuristicLate
Heuristic model (late): 98 % bot likelihood (300 features)
|
+0.953 | 5.4 |
|
HeaderCorrelation
UA rotation: 12 different User-Agents with identical header profile from same IP
|
+0.900 | 0.2 |
|
Heuristic
Heuristic model (early): 72 % bot likelihood (22 features)
|
+0.446 | 0.1 |
|
Behavioral
Request patterns appear normal; Visiting many random URLs in no logical order (random scanning pattern)
|
+0.200 | 0.3 |
|
Ip
IP appears normal: 212.30.36.xxx
|
-0.150 | 0.0 |
|
UserAgent
User-Agent appears normal
|
-0.150 | 0.8 |
|
TlsFingerprint
TLS connection appears normal
|
-0.150 | 0.0 |
|
AI
AI analysis: borderline case, monitoring
|
+0.000 | 10.3 |
|
Header
Browser UA without Accept-Language; deployment norm is low language rate (42 % over 445 samples)
|
+0.000 | 0.1 |
|
AiScraper
No AI scraper signals detected
|
+0.000 | 0.0 |
|
VerifiedBot
No known bot UA pattern
|
+0.000 | 0.0 |
|
SecurityTool
No security tools detected in User-Agent
|
+0.000 | 0.1 |
|
RequestHydrator
Request signals hydrated to sink
|
+0.000 | 0.0 |
|
Http2Fingerprint
Using HTTP/1.1; environment norm is HTTP/1.1 (60 % HTTP/2 over 302 samples)
|
+0.000 | 0.0 |
|
Http3Fingerprint
Connection uses HTTP/1.1 (not HTTP/3)
|
+0.000 | 0.0 |
|
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
|
+0.000 | 0.0 |
|
TransportProtocol
Transport protocol analysis complete
|
+0.000 | 0.0 |
|
FastPathReputation
No known patterns in reputation cache
|
+0.000 | 0.0 |
Signal Intelligence
request
protocol
HTTP/1.1
accept_encoding
*
risk
justification
Classified Scraper (probability 0.90, confidence 0.68)
friendly_pin_trace
not-applicable:botType=Scraper,yamlType=null,botName=null
tls
cipher
TLS_AES_256_GCM_SHA384
Version
TLSv1.3
version
TLSv1.3
Policy applied
Hit history
No sessions recorded yet.
Sessions are created when a visitor's activity gap exceeds 30 minutes.
Effective policy
Loading effective policy…
ASP.NET Pack — Auth events
JWKS reachable
Licensed
ASP.NET pack enabled
OTel Mesh — Traces
Fingerprint timeline
ded5c18040d341c5934a4b0483b93a3c
0 observations
Span + log activity for this fingerprint, ordered by timestamp.
No timeline observations
OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)
Signature:
jwZpTgAGqXy4AZbQcvQsZg
|
Processing: 17ms
|
Country: DE
|
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
|
First seen: 2026-07-15 02:41:38 UTC