OK
reachable
| Mode | Observations | Maturity | Shift from baseline | Last seen |
|---|---|---|---|---|
| bot-raw | 796 | 796 | 0.03 (header case pattern, header order hash, accept encoding ordered) | 03:34:37 |
| signalr-negotiate | 52 | 52 | 0.39 (header case pattern, header order hash, accept encoding ordered) | 03:11:08 |
| sub-resource | 4 | 4 | 0.67 (ua family, priority, referer host family) | 22:15:08 |
| navigation | 8 | 8 | 0.34 (upgrade insecure requests, header order hash, ip subnet) | 11:58:15 |
| # | Path |
|---|---|
| 1 | /sito/wp-includes/wlwmanifest.xml |
| 2 | /cms/wp-includes/wlwmanifest.xml |
| 3 | /site/wp-includes/wlwmanifest.xml |
| 4 | /wp2/wp-includes/wlwmanifest.xml |
| 5 | /test/wp-includes/wlwmanifest.xml |
| 6 | /wp1/wp-includes/wlwmanifest.xml |
| 7 | /shop/wp-includes/wlwmanifest.xml |
| 8 | /2019/wp-includes/wlwmanifest.xml |
| 9 | /2020/wp-includes/wlwmanifest.xml |
| 10 | /news/wp-includes/wlwmanifest.xml |
| 11 | /wp/wp-includes/wlwmanifest.xml |
| 12 | /website/wp-includes/wlwmanifest.xml |
| 13 | /wordpress/wp-includes/wlwmanifest.xml |
| 14 | /web/wp-includes/wlwmanifest.xml |
| 15 | /blog/wp-includes/wlwmanifest.xml |
| 16 | / |
| 17 | /xmlrpc.php |
| 18 | /wp-includes/wlwmanifest.xml |
| Time | Method | Path | Status | Prob | Conf | Risk Profile | Action | Time |
|---|---|---|---|---|---|---|---|---|
| 23:54:10 | GET | /sito/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 14.1ms |
| 23:54:08 | GET | /cms/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 17.4ms |
| 23:54:04 | GET | /site/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 13.4ms |
| 23:54:01 | GET | /wp2/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 14.0ms |
| 23:53:59 | GET | /test/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 13.5ms |
| 23:53:56 | GET | /wp1/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 14.2ms |
| 23:53:54 | GET | /shop/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 13.6ms |
| 23:53:51 | GET | /2019/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 21.6ms |
| 23:53:48 | GET | /2020/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 13.3ms |
| 23:53:45 | GET | /news/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 12.6ms |
| 23:53:42 | GET | /wp/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 12.5ms |
| 23:53:40 | GET | /website/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 13.6ms |
| 23:53:37 | GET | /wordpress/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 13.3ms |
| 23:53:35 | GET | /web/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 11.6ms |
| 23:53:32 | GET | /blog/wp-includes/wlwmanifest.xml | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 13.4ms |
| 23:53:30 | GET | / | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 13.5ms |
| 23:53:27 | GET | /xmlrpc.php | 200 | 90 % | 68 % | VeryHigh | Silent Throttle | 12.5ms |
| 23:53:23 | GET | /wp-includes/wlwmanifest.xml | 200 | 90 % | 68 % | VeryHigh | Silent Throttle | 12.3ms |
| 23:53:19 | GET | / | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 13.6ms |
| 23:53:17 | GET | / | 200 | 90 % | 88 % | VeryHigh | Silent Throttle | 13.5ms |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[phone] Safari/537.36
Chrome 89 Windows on /sito/wp-includes... - caught by Browser User-Agent from datacenter IP, Datacenter IP detected: Cloud Provider, Chrome v89 is 61 versions behind (latest: 150)
| Detector | Confidence Delta | Timing (ms) |
|---|---|---|
|
HeuristicLate
Heuristic model (late): 79 % bot likelihood (316 features)
|
+0.588 | 0.4 |
|
Inconsistency
Browser User-Agent from datacenter IP; Outdated browser version in User-Agent
|
+1.000 | 0.1 |
|
Ip
Datacenter IP detected: Cloud Provider
|
+0.600 | 0.0 |
|
Heuristic
Heuristic model (early): 66 % human likelihood (21 features)
|
-0.320 | 0.1 |
|
VersionAge
Chrome v89 is 61 versions behind (latest: 150)
|
+0.400 | 0.1 |
|
ClaimedIdentity
Chrome behavioral profile mismatch (consistency=0.44): missing Sec-Fetch headers (expected for this browser); browser UA from datacenter IP; accept_encoding: observed=0.00 expected≈1.00
|
+0.350 | 0.2 |
|
Header
Headers appear normal
|
-0.150 | 0.1 |
|
UserAgent
User-Agent appears normal
|
-0.150 | 0.7 |
|
Behavioral
Request patterns appear normal; Timing anomaly: 0.0s vs 2.8±0.7s (z=3.9)
|
+0.100 | 0.4 |
|
Http2Fingerprint
Using HTTP/1.1 instead of HTTP/2 (HTTP/2 rate: 81 % over 380 samples)
|
+0.081 | 0.0 |
|
TlsFingerprint
Using HTTP instead of HTTPS (uncommon for modern browsers)
|
+0.050 | 0.0 |
|
AI
AI analysis: borderline case, monitoring
|
+0.000 | 10.5 |
|
Llm
LLM detection disabled or unavailable
|
+0.000 | 0.0 |
|
Intent
Session intent: browsing (threat=0.05, band=None)
|
+0.000 | 0.8 |
|
AiScraper
No AI scraper signals detected
|
+0.000 | 0.1 |
|
Similarity
No prior visitor signatures to compare against yet
|
+0.000 | 0.0 |
|
StreamAbuse
Stream abuse check - non-streaming request
|
+0.000 | 0.1 |
|
VerifiedBot
No known bot UA pattern
|
+0.000 | 0.0 |
|
SecurityTool
No security tools detected in User-Agent
|
+0.000 | 0.1 |
|
CookieBehavior
No Set-Cookie headers observed
|
+0.000 | 0.1 |
|
ReputationBias
No learned reputation patterns matched
|
+0.000 | 0.0 |
|
ContentSequence
Document hit; sequence reset at /sito/wp-includes/wlwmanifest.xml
|
+0.000 | 0.1 |
|
ProjectHoneypot
Skipped: ProjectHoneypot is disabled in configuration
|
+0.000 | 0.0 |
|
ReactivePattern
No prior error events to analyze
|
+0.000 | 0.0 |
|
RequestHydrator
Request signals hydrated to sink
|
+0.000 | 0.0 |
|
Http3Fingerprint
Connection uses HTTP/1.1 (not HTTP/3)
|
+0.000 | 0.0 |
|
ResponseBehavior
Response coordinator not configured
|
+0.000 | 0.0 |
|
TcpIpFingerprint
Network fingerprint analysis complete (no anomalies detected)
|
+0.000 | 0.0 |
|
HeaderCorrelation
Single signature per header profile
|
+0.000 | 0.0 |
|
TransportProtocol
Transport protocol analysis complete
|
+0.000 | 0.0 |
|
FastPathReputation
No known patterns in reputation cache
|
+0.000 | 0.0 |
|
MultiLayerCorrelation
Cross-signal consistency check complete (not enough data to compare)
|
+0.000 | 0.2 |
No sessions recorded yet.
Sessions are created when a visitor's activity gap exceeds 30 minutes.
reachable
ASP.NET pack enabled
ded5c18040d341c5934a4b0483b93a3c
0 observations
Span + log activity for this fingerprint, ordered by timestamp.
OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)
dZehUjSniMI-kt7XF2YFQw
|
Processing: 14ms
|
Country: BE
|
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[phone] Safari/537.36
|
First seen: 2026-07-14 23:53:17 UTC