GB User
Human
Policy:
Allow
Probability
2 %
Confidence
62 %
Risk Profile
High
Threat
None
Hit Count
50
Last Seen
51m ago
Drifted
Googlebot
→
Mastodon Family
0.35
→
0.36
Fingerprint Profile
TLS Version
--
HTTP Protocol
--
Protocol Client
Detected
TCP OS Hint
-0.18
Fingerprint Integrity
-0.45
UA Consistency
-0.33
Headless Indicator
Low
Datacenter IP
Clean
Endpoints Visited (2) Click to expand
| # | Path |
|---|---|
| 1 | /stylobot/hub/negotiate |
| 2 | /stylobot/hub |
Raw Requests (50) Click to expand
| Time | Method | Path | Status | Prob | Conf | Risk Profile | Action | Time |
|---|---|---|---|---|---|---|---|---|
| 10:41:55 | POST | /stylobot/hub/negotiate | 200 | 2 % | 62 % | High | Allow | 1.5ms |
| 08:15:57 | GET | /stylobot/hub | 200 | 2 % | 68 % | High | Allow | 1.0ms |
| 08:15:57 | POST | /stylobot/hub/negotiate | 200 | 2 % | 62 % | High | Allow | 5.4ms |
| 06:47:01 | GET | /stylobot/hub | 200 | 2 % | 68 % | High | Allow | 1.1ms |
| 06:47:01 | POST | /stylobot/hub/negotiate | 200 | 2 % | 62 % | High | Allow | 5.2ms |
| 03:37:50 | GET | /stylobot/hub | 200 | 2 % | 68 % | High | Allow | 1.0ms |
| 03:37:50 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | High | Allow | 2.4ms |
| 03:06:10 | GET | /stylobot/hub | 200 | 2 % | 68 % | High | Allow | 1.2ms |
| 03:06:10 | POST | /stylobot/hub/negotiate | 200 | 2 % | 62 % | High | Allow | 1.5ms |
| 01:27:41 | GET | /stylobot/hub | 200 | 2 % | 68 % | High | Allow | 1.1ms |
| 01:27:41 | POST | /stylobot/hub/negotiate | 200 | 2 % | 62 % | High | Allow | 5.0ms |
| 00:33:23 | GET | /stylobot/hub | 200 | 6 % | 68 % | High | Allow | 1.1ms |
| 00:33:23 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:32:52 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.3ms |
| 00:32:34 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:32:18 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:32:02 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:31:46 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:31:30 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:31:15 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:30:59 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:30:43 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:30:27 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.3ms |
| 00:30:11 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:29:56 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:29:40 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:29:24 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:29:08 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:28:52 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:28:36 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.3ms |
| 00:28:20 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:28:04 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.3ms |
| 00:27:48 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:27:32 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:27:16 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:27:00 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:26:44 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 2.8ms |
| 00:26:28 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:26:12 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:25:56 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:25:40 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:25:25 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:25:09 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:24:54 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 2.6ms |
| 00:24:38 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:24:22 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:24:06 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:23:50 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
| 00:23:34 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.1ms |
| 00:23:18 | POST | /stylobot/hub | 200 | 1 % | 68 % | High | Allow | 1.2ms |
Bot Probability & Confidence History
StyloBot Detection Overhead (ms)
Analysis
Real browser user (likely) - Previously verified as safe (UserAgent seen 198 times), Heuristic model (early): 97 % human likelihood (19 features)
Detection Signals
- • Previously verified as safe (UserAgent seen 198 times)
- • Heuristic model (early): 97 % human likelihood (19 features)
- • Endpoint history: /stylobot/hub/negotiate served 2xx until 2026-06-10 (493 hits); scanners still probing it
- • TLS connection appears normal
- • User-Agent appears normal
Detector Contributions (14 detectors)
| Detector | Confidence Delta | Timing (ms) |
|---|---|---|
|
FastPathReputation
Previously verified as safe (UserAgent seen 198 times)
|
-0.800 | 0.1 |
|
Heuristic
Heuristic model (early): 97 % human likelihood (19 features)
|
-0.931 | 0.0 |
|
EndpointHistory
Endpoint history: /stylobot/hub/negotiate served 2xx until 2026-06-10 (493 hits); scanners still probing it
|
+0.700 | 0.0 |
|
TlsFingerprint
TLS connection appears normal
|
-0.300 | 0.0 |
|
UserAgent
User-Agent appears normal
|
-0.250 | 0.3 |
|
Behavioral
Request patterns appear normal
|
-0.300 | 0.0 |
|
Header
Same-origin browser fetch - Sec-Fetch-Site attestation present
|
-0.150 | 0.0 |
|
AiScraper
No AI scraper signals detected
|
+0.000 | 0.0 |
|
SecurityTool
No security tools detected in User-Agent
|
+0.000 | 0.0 |
|
Http2Fingerprint
Using HTTP/1.1; environment norm is HTTP/1.1 (0 % HTTP/2 over 313 samples)
|
+0.000 | 0.0 |
|
Http3Fingerprint
Connection uses HTTP/1.1 (not HTTP/3)
|
+0.000 | 0.0 |
|
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
|
+0.000 | 0.0 |
|
HeaderCorrelation
Single signature per header profile
|
+0.000 | 0.0 |
|
TransportProtocol
Transport protocol analysis complete
|
+0.000 | 0.0 |
Signal Intelligence
behavioral
anomaly
False
h2
is_http2
False
protocol
HTTP/1.1
behind_proxy
False
population_samples
313
population_http2_rate
0
h3
is_http3
False
protocol
HTTP/1.1
header
count
29
has_accept
True
sec_fetch_dest
empty
sec_fetch_mode
cors
sec_fetch_site
same-origin
has_proxy_headers
False
has_accept_encoding
True
has_accept_language
True
is_websocket_upgrade
False
sec_fetch_same_origin
True
is_service_worker_fetch
False
heuristic
confidence
0.931
prediction
human
early_completed
True
intent
threat_score
0.65
ip
subnet
2a02:0c7c:d293
is_local
False
referrer
domain
www.stylobot.net
reputation
can_allow
True
fastpath_hit
True
fastpath.useragent.score
0.039
fastpath.useragent.state
ConfirmedGood
fastpath.useragent.support
197.989
fastpath.useragent.pattern_id
ua:81b197d8528f2ba4
request
protocol
HTTP/3
accept_encoding
gzip, br
risk
justification
threat score 0.65
friendly_pin_trace
not-applicable:botType=Scraper,yamlType=null,botName=null
tcp
connection_header
keep-alive
tls
is_https
True
available
True
ua
family
Chrome
is_bot
False
family_version
148
Signature:
5WT9Mw3nR8Zuk3O-nuipNw
|
Processing: 1.5ms
|
Country: GB
|
First seen: 2026-06-10 00:23:18 UTC