US User
Human
Policy:
Allow
Probability
2 %
Confidence
62 %
Risk Profile
VeryLow
Threat
None
Hit Count
2
Last Seen
11h 50m ago
Fingerprint Profile
TLS Version
--
HTTP Protocol
--
Protocol Client
Detected
TCP OS Hint
-0.18
Fingerprint Integrity
-0.80
UA Consistency
-0.33
Headless Indicator
Low
Datacenter IP
Clean
Raw Requests (3) Click to expand
| Time | Method | Path | Status | Prob | Conf | Risk Profile | Action | Time |
|---|---|---|---|---|---|---|---|---|
| 09:19:06 | GET | /dashboard/signature/MJV2i4wxxkMPq7WUJNwndg | 200 | 2 % | 68 % | VeryLow | Allow | 1.1ms |
| 09:19:05 | GET | /dashboard/entity/2d8cdad0dec048cc | 302 | 2 % | 62 % | VeryLow | Allow | 0.9ms |
| 09:19:01 | GET | / | 200 | 5 % | 62 % | VeryLow | Allow | 1.7ms |
Analysis
Real browser user (likely) - Heuristic model (early): 96 % human likelihood (18 features), Cached fingerprint verdict (prob=0.00, conf=0.70, age=54s)
Detection Signals
- • Heuristic model (early): 96 % human likelihood (18 features)
- • Cached fingerprint verdict (prob=0.00, conf=0.70, age=54s)
- • TLS connection appears normal
- • User-Agent appears normal
- • Request patterns appear normal
Detector Contributions (16 detectors)
| Detector | Confidence Delta | Timing (ms) |
|---|---|---|
|
Heuristic
Heuristic model (early): 96 % human likelihood (18 features)
|
-0.927 | 0.0 |
|
FingerprintPrior
Cached fingerprint verdict (prob=0.00, conf=0.80, age=55s)
|
-1.000 | 0.0 |
|
TlsFingerprint
TLS connection appears normal
|
-0.300 | 0.0 |
|
UserAgent
User-Agent appears normal
|
-0.250 | 0.1 |
|
Behavioral
Request patterns appear normal
|
-0.300 | 0.0 |
|
Ip
IP appears normal: 196.51.244.xxx
|
-0.250 | 0.0 |
|
Header
Same-origin browser fetch - Sec-Fetch-Site attestation present
|
-0.150 | 0.0 |
|
Http2Fingerprint
Using HTTP/1.1 instead of HTTP/2 (HTTP/2 rate: 0 % over 3 samples)
|
+0.050 | 0.0 |
|
AiScraper
No AI scraper signals detected
|
+0.000 | 0.0 |
|
SecurityTool
No security tools detected in User-Agent
|
+0.000 | 0.0 |
|
ContentSequence
Document hit — sequence reset at /dashboard/signature/MJV2i4wxxkMPq7WUJNwndg
|
+0.000 | 0.2 |
|
Http3Fingerprint
Connection uses HTTP/1.1 (not HTTP/3)
|
+0.000 | 0.0 |
|
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
|
+0.000 | 0.0 |
|
HeaderCorrelation
Single signature per header profile
|
+0.000 | 0.0 |
|
TransportProtocol
Transport protocol analysis complete
|
+0.000 | 0.0 |
|
FastPathReputation
No known patterns in reputation cache
|
+0.000 | 0.0 |
Signal Intelligence
behavioral
anomaly
False
h2
is_http2
False
protocol
HTTP/1.1
behind_proxy
False
population_samples
3
population_http2_rate
0
h3
is_http3
False
protocol
HTTP/1.1
header
count
20
has_accept
True
sec_fetch_dest
document
sec_fetch_mode
navigate
sec_fetch_site
same-origin
has_proxy_headers
False
has_accept_encoding
True
has_accept_language
True
is_websocket_upgrade
False
sec_fetch_same_origin
True
is_service_worker_fetch
False
heuristic
confidence
0.927
prediction
human
early_completed
True
ip
subnet
196.51.244
is_ipv6
False
is_local
False
is_datacenter
False
referrer
domain
stylobot.net
request
protocol
HTTP/1.1
accept_encoding
gzip, br
risk
justification
No significant indicators
friendly_pin_trace
not-applicable:botType=null,yamlType=null,botName=null
tcp
connection_header
keep-alive
tls
is_https
True
available
True
ua
family
Firefox
is_bot
False
family_version
115
Signature:
MJV2i4wxxkMPq7WUJNwndg
|
Processing: 0.9ms
|
Country: US