OK
reachable
| Mode | Observations | Maturity | Shift from baseline | Last seen |
|---|---|---|---|---|
| bot-raw | 581 | 581 | 0.12 (header order hash, header case pattern, dnt) | 03:24:12 |
| signalr-negotiate | 1428 | 1428 | 0.05 (header order hash, header case pattern, custom header signature) | 03:24:12 |
| navigation | 9 | 9 | 0.76 (header order hash, custom header signature, x requested with) | 06:54:14 |
| sub-resource | 10 | 10 | 0.77 (custom header signature, x requested with, sec ch ua brands ordered) | 06:33:33 |
| # | Path |
|---|---|
| 1 | /stylobot/hub |
| 2 | /stylobot/hub/negotiate |
| Time | Method | Path | Status | Prob | Conf | Risk Profile | Action | Time |
|---|---|---|---|---|---|---|---|---|
| 03:41:24 | CONNECT | /stylobot/hub | 200 | 58 % | 82 % | Medium | Allow | 14.1ms |
| 03:41:24 | CONNECT | /stylobot/hub | 200 | 32 % | 84 % | Low | Allow | 15.3ms |
| 03:41:24 | CONNECT | /stylobot/hub | 200 | 32 % | 84 % | Low | Allow | 13.9ms |
| 03:41:24 | CONNECT | /stylobot/hub | 200 | 58 % | 82 % | Medium | Allow | 13.7ms |
| 03:41:24 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 13.2ms |
| 03:41:24 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 12.2ms |
| 03:41:24 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 12.1ms |
| 03:41:24 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 12.0ms |
| 03:41:23 | CONNECT | /stylobot/hub | 200 | 74 % | 84 % | High | Silent Throttle | 14.6ms |
| 03:41:22 | CONNECT | /stylobot/hub | 200 | 58 % | 82 % | Medium | Allow | 13.7ms |
| 03:41:22 | CONNECT | /stylobot/hub | 200 | 58 % | 82 % | Medium | Allow | 13.5ms |
| 03:41:22 | CONNECT | /stylobot/hub | 200 | 32 % | 84 % | Low | Allow | 13.5ms |
| 03:41:22 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 11.5ms |
| 03:41:22 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 20.5ms |
| 03:41:22 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 20.4ms |
| 03:41:22 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 20.4ms |
| 03:24:12 | CONNECT | /stylobot/hub | 200 | 58 % | 82 % | Medium | Allow | 14.8ms |
| 03:24:12 | CONNECT | /stylobot/hub | 200 | 58 % | 82 % | Medium | Allow | 14.4ms |
| 03:24:12 | CONNECT | /stylobot/hub | 200 | 32 % | 84 % | Low | Allow | 14.7ms |
| 03:24:12 | CONNECT | /stylobot/hub | 200 | 33 % | 84 % | Low | Allow | 14.8ms |
| 03:24:12 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 12.1ms |
| 03:24:12 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 12.1ms |
| 03:24:12 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 12.0ms |
| 03:24:12 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 12.2ms |
| 03:24:10 | CONNECT | /stylobot/hub | 200 | 59 % | 82 % | Medium | Allow | 13.7ms |
| 03:24:10 | CONNECT | /stylobot/hub | 200 | 33 % | 84 % | Low | Allow | 13.7ms |
| 03:24:10 | CONNECT | /stylobot/hub | 200 | 58 % | 82 % | Medium | Allow | 13.5ms |
| 03:24:10 | CONNECT | /stylobot/hub | 200 | 33 % | 84 % | Low | Allow | 13.3ms |
| 03:24:10 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 20.8ms |
| 03:24:10 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 20.8ms |
| 03:24:10 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 20.9ms |
| 03:24:10 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 20.9ms |
| 03:11:56 | POST | /stylobot/hub | 200 | 1 % | 68 % | VeryLow | Allow | 12.1ms |
| 03:11:41 | POST | /stylobot/hub | 200 | 1 % | 68 % | VeryLow | Allow | 10.9ms |
| 03:11:26 | POST | /stylobot/hub | 200 | 1 % | 68 % | VeryLow | Allow | 11.8ms |
| 03:11:26 | POST | /stylobot/hub | 200 | 1 % | 68 % | VeryLow | Allow | 22.3ms |
| 03:11:26 | CONNECT | /stylobot/hub | 200 | 59 % | 82 % | Medium | Allow | 16.2ms |
| 03:11:26 | CONNECT | /stylobot/hub | 200 | 59 % | 82 % | Medium | Allow | 15.7ms |
| 03:11:26 | CONNECT | /stylobot/hub | 200 | 33 % | 84 % | Low | Allow | 15.6ms |
| 03:11:26 | GET | /stylobot/hub | 200 | 1 % | 68 % | VeryLow | Allow | 12.0ms |
| 03:11:26 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 13.6ms |
| 03:11:26 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 13.6ms |
| 03:11:26 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 12.3ms |
| 03:11:26 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 12.3ms |
| 03:11:24 | CONNECT | /stylobot/hub | 200 | 33 % | 84 % | Low | Allow | 18.8ms |
| 03:11:24 | CONNECT | /stylobot/hub | 200 | 59 % | 82 % | Medium | Allow | 16.6ms |
| 03:11:24 | CONNECT | /stylobot/hub | 200 | 59 % | 82 % | Medium | Allow | 16.3ms |
| 03:11:24 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 12.4ms |
| 03:11:24 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 12.0ms |
| 03:11:24 | POST | /stylobot/hub/negotiate | 200 | 1 % | 68 % | VeryLow | Allow | 12.0ms |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Chrome 150 macOS on /stylobot/hub - caught by Extremely fast page navigation: 15ms between page requests, Missing Accept header, No cookies maintained across multiple requests
| Detector | Confidence Delta | Timing (ms) |
|---|---|---|
|
Behavioral
Extremely fast page navigation: 15ms between page requests; No referrer on subsequent request; No cookies maintained across multiple requests
|
+0.800 | 0.4 |
|
Heuristic
Heuristic model (early): 75 % human likelihood (19 features)
|
-0.504 | 0.1 |
|
Header
Missing Accept header
|
+0.478 | 0.1 |
|
HeuristicLate
Heuristic model (late): 59 % bot likelihood (300 features)
|
+0.178 | 0.3 |
|
Inconsistency
Chrome User-Agent without Client Hints
|
+0.200 | 0.0 |
|
SessionVector
Session behavior consistent with client history (similarity=1.00)
|
-0.200 | 0.2 |
|
Ip
IP appears normal: 90.219.65.xxx
|
-0.150 | 0.0 |
|
UserAgent
User-Agent appears normal
|
-0.150 | 0.5 |
|
Periodicity
Irregular timing with natural daily rhythm
|
-0.150 | 0.1 |
|
TlsFingerprint
TLS connection appears normal
|
-0.150 | 0.0 |
|
ClaimedIdentity
Chrome behavioral profile consistent (score=0.60)
|
-0.150 | 0.1 |
|
VersionAge
Browser/OS versions appear current
|
-0.050 | 0.0 |
|
AI
AI analysis: borderline case, monitoring
|
+0.000 | 10.7 |
|
Llm
LLM detection disabled or unavailable
|
+0.000 | 0.0 |
|
Intent
Session intent: browsing (threat=0.05, band=None)
|
+0.000 | 0.4 |
|
AiScraper
No AI scraper signals detected
|
+0.000 | 0.0 |
|
Similarity
No prior visitor signatures to compare against yet
|
+0.000 | 0.0 |
|
StreamAbuse
Stream abuse check - normal streaming activity
|
+0.000 | 0.1 |
|
VerifiedBot
No known bot UA pattern
|
+0.000 | 0.0 |
|
SecurityTool
No security tools detected in User-Agent
|
+0.000 | 0.1 |
|
CacheBehavior
Cache analysis skipped for streaming transport (non-cacheable by design)
|
+0.000 | 0.0 |
|
CookieBehavior
No Set-Cookie headers observed
|
+0.000 | 0.1 |
|
ReputationBias
No learned reputation patterns matched
|
+0.000 | 0.0 |
|
ProjectHoneypot
Skipped: ProjectHoneypot is disabled in configuration
|
+0.000 | 0.0 |
|
ReactivePattern
No prior error events to analyze
|
+0.000 | 0.0 |
|
RequestHydrator
Request signals hydrated to sink
|
+0.000 | 0.0 |
|
Http2Fingerprint
HTTP/2 analysis complete (no anomalies detected)
|
+0.000 | 0.0 |
|
Http3Fingerprint
Connection uses HTTP/2 (not HTTP/3)
|
+0.000 | 0.0 |
|
ResponseBehavior
Response coordinator not configured
|
+0.000 | 0.0 |
|
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
|
+0.000 | 0.0 |
|
HeaderCorrelation
Single signature per header profile
|
+0.000 | 0.0 |
|
ResourceWaterfall
Insufficient document requests for analysis
|
+0.000 | 0.1 |
|
TransportProtocol
Transport protocol analysis complete
|
+0.000 | 0.0 |
|
BehavioralWaveform
Behavioral waveform analysis complete (insufficient history)
|
+0.000 | 0.3 |
|
FastPathReputation
No known patterns in reputation cache
|
+0.000 | 0.0 |
|
MultiLayerCorrelation
Cross-signal consistency check complete (not enough data to compare)
|
+0.000 | 0.2 |
No sessions recorded yet.
Sessions are created when a visitor's activity gap exceeds 30 minutes.
reachable
ASP.NET pack enabled
77c9732d438b4e2b95885df8697d8311
0 observations
Span + log activity for this fingerprint, ordered by timestamp.
OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)
QMzTKXgT7dqFJtc_XTTGpA
|
Processing: 14ms
|
Country: GB
|
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
|
First seen: 2026-07-15 03:11:24 UTC