Sign in
← Dashboard / Signature Detail
Overview Activity Visitors Countries Endpoints Sessions Threats Investigate
GB

Safari 26 macOS

 · Safari 26.5 / macOS Human
Policy: Allow
Probability
0 %
Confidence
91 %
Risk Profile
VeryLow
Threat
None
Hit Count
50
Last Seen
1m ago
Network Locale Headers Tool Transport Session Quality
Closest to
Safari Desktop
Drift vs
35.2%

Fingerprint Profile

TLS Version
TLSv1.3
HTTP Protocol
HTTP/2
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Suspect
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
signalr-negotiate 173 173 0.11 (custom header signature, header order hash, x requested with) 21:18:10
sub-resource 109 109 0.39 (custom header signature, header order hash, x requested with) 21:18:10
navigation 8 8 0.40 (custom header signature, header order hash, x requested with) 21:18:05
bot-raw 159 159 0.16 (custom header signature, header order hash, x requested with) 21:05:55
4 modes across 449 observations. See composite browser-mode fingerprints.
Endpoints Visited (19) Click to expand · stats unavailable
# Path
1 /dist/assets/json-enc-DxO8W7MP.js
2 /fonts/raleway/raleway-latin-400-normal.woff2
3 /fonts/raleway/raleway-latin-900-normal.woff2
4 /fonts/raleway/raleway-latin-500-normal.woff2
5 /_content/Mostlylucid.BotDetection.UI/vendor/fonts/boxicons.woff2
6 /fonts/raleway/raleway-latin-500-italic.woff2
7 /dist/assets/index.js
8 /_content/Mostlylucid.BotDetection.UI/vendor/js/signalr.min.js
9 /_content/Mostlylucid.BotDetection.UI/css/sb-components.css
10 /img/stylowall.svg
11 /_content/Mostlylucid.BotDetection.UI/img/stylowall.svg
12 /_content/Mostlylucid.BotDetection.UI/vendor/css/boxicons.min.css
13 /dist/assets/index.css
14 /_content/Mostlylucid.BotDetection.UI/bot-detection-details.css
15 /site.webmanifest
16 /
17 /dashboard/traffic
18 /stylobot/hub
19 /stylobot/hub/negotiate
Raw Requests (50) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
21:18:10 GET /dist/assets/json-enc-DxO8W7MP.js 200 2 % 68 % VeryLow Allow 12.9ms
21:18:10 GET /fonts/raleway/raleway-latin-400-normal.woff2 200 3 % 68 % VeryLow Allow 12.1ms
21:18:10 GET /fonts/raleway/raleway-latin-900-normal.woff2 200 3 % 68 % VeryLow Allow 12.8ms
21:18:10 GET /fonts/raleway/raleway-latin-500-normal.woff2 200 3 % 68 % VeryLow Allow 12.7ms
21:18:10 GET /_content/Mostlylucid.BotDetection.UI/vendor/fonts/boxicons.woff2 200 3 % 68 % VeryLow Allow 12.7ms
21:18:10 GET /fonts/raleway/raleway-latin-500-italic.woff2 200 3 % 68 % VeryLow Allow 12.0ms
21:18:10 GET /dist/assets/index.js 200 2 % 68 % VeryLow Allow 11.8ms
21:18:10 GET /_content/Mostlylucid.BotDetection.UI/vendor/js/signalr.min.js 200 3 % 68 % VeryLow Allow 11.9ms
21:18:10 GET /_content/Mostlylucid.BotDetection.UI/css/sb-components.css 200 2 % 68 % VeryLow Allow 12.1ms
21:18:10 GET /img/stylowall.svg 200 2 % 68 % VeryLow Allow 12.0ms
21:18:10 GET /_content/Mostlylucid.BotDetection.UI/img/stylowall.svg 200 2 % 68 % VeryLow Allow 12.1ms
21:18:10 GET /_content/Mostlylucid.BotDetection.UI/vendor/css/boxicons.min.css 200 2 % 68 % VeryLow Allow 11.9ms
21:18:10 GET /dist/assets/index.css 200 2 % 68 % VeryLow Allow 11.3ms
21:18:10 GET /_content/Mostlylucid.BotDetection.UI/bot-detection-details.css 200 2 % 68 % VeryLow Allow 11.8ms
21:18:10 GET /site.webmanifest 200 3 % 68 % VeryLow Allow 11.4ms
21:18:05 GET / 200 1 % 68 % VeryLow Allow 11.9ms
21:18:04 GET / 200 1 % 68 % VeryLow Allow 11.6ms
21:18:02 GET /dashboard/traffic 200 2 % 68 % VeryLow Allow 11.6ms
21:05:55 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 11.8ms
21:05:55 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 11.6ms
21:05:55 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 11.3ms
21:05:55 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 12.2ms
21:05:55 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 11.6ms
21:05:55 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 11.6ms
21:05:55 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 11.5ms
21:05:54 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 21.0ms
21:05:54 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 21.0ms
21:05:54 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 21.1ms
20:13:01 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 11.0ms
20:13:01 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 11.1ms
20:13:01 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 11.3ms
20:13:01 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 10.7ms
20:13:01 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 10.7ms
20:13:01 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 12.1ms
20:13:01 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 12.1ms
20:13:01 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 12.1ms
20:13:01 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 11.8ms
20:13:01 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 12.0ms
20:10:13 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 12.8ms
20:10:13 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 11.5ms
20:10:13 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 12.1ms
20:10:13 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 11.7ms
20:10:13 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 11.4ms
20:10:13 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 11.8ms
20:10:13 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 11.1ms
20:10:13 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 11.3ms
20:10:13 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 11.6ms
20:10:13 POST /stylobot/hub/negotiate 200 1 % 68 % VeryLow Allow 14.6ms
19:44:25 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 11.8ms
19:44:25 CONNECT /stylobot/hub 200 1 % 68 % VeryLow Allow 11.8ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15

Analysis

Real browser user (likely) - Same-origin browser fetch - Sec-Fetch-Site attestation pr..., Request patterns appear normal

Detection Signals

  • • Same-origin browser fetch - Sec-Fetch-Site attestation present
  • • Request patterns appear normal
  • • IP appears normal: 90.219.65.xxx
  • • TLS connection appears normal
  • • User-Agent appears normal

Detector Contributions (19 detectors)

Detector Confidence Delta Timing (ms)
Heuristic
Heuristic model (early): 94 % human likelihood (18 features)
 -0.882 0.1
HeuristicLate
Heuristic model (late): 73 % human likelihood (305 features)
 -0.460 0.4
Header
Same-origin browser fetch - Sec-Fetch-Site attestation present
 -0.400 0.0
Ip
IP appears normal: 90.219.65.xxx
 -0.150 0.0
UserAgent
User-Agent appears normal
 -0.150 0.9
Behavioral
Request patterns appear normal
 -0.150 0.6
TlsFingerprint
TLS connection appears normal
 -0.150 0.0
AI
AI analysis: borderline case, monitoring
 +0.000 10.5
AiScraper
No AI scraper signals detected
 +0.000 0.0
VerifiedBot
No known bot UA pattern
 +0.000 0.0
SecurityTool
No security tools detected in User-Agent
 +0.000 0.1
ContentSequence
Sequence on track at position 12
 +0.000 0.1
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http2Fingerprint
HTTP/2 analysis complete (no anomalies detected)
 +0.000 0.0
Http3Fingerprint
Connection uses HTTP/2 (not HTTP/3)
 +0.000 0.0
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
 +0.000 0.0
HeaderCorrelation
Single signature per header profile
 +0.000 0.1
TransportProtocol
Transport protocol analysis complete
 +0.000 0.0
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0

Signal Intelligence

h2

protocol h2

referrer

domain stylo.bot

request

protocol HTTP/2
accept_encoding gzip, deflate, br, zstd

risk

justification Probability 0.02, confidence 0.68
friendly_pin_trace not-applicable:botType=null,yamlType=null,botName=null

tls

cipher TLS_AES_256_GCM_SHA384
Version TLSv1.3
version TLSv1.3

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth events
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

4091380c8fda4e08b92ff890d17c7d61 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Signature: 1wuBTK8TDBqipLl_lmzS4g | Processing: 13ms | Country: GB | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15 | First seen: 2026-07-14 19:44:25 UTC