REQUEST DETAILS - COMPREHENSIVE ANALYSIS

REQUEST ID: 15e49c2e-f1b8-486d-9546-16dde692d812

2026-11-02T20:00:28.789Z 2a03:2880:f808:39:: BOT

BOT DETECTION RESULT

STATUS: BOT
CONFIDENCE: 100%
OPERATOR: Meta
BOT NAME: Meta-ExternalAgent
TYPE: AI Training
UA CLAIM: Meta-ExternalAgent | CLOUDFLARE VERIFIED: yes (Page Preview)
WHY BOT:
  • AI training crawler for Meta's Llama and social media models

REQUEST INFO

ID: 15e49c2e-f1b8-486d-9546-16dde692d812
TIME: 2026-11-02T20:00:28.789Z
METHOD: GET
URL: https://header-analyzer.franzai.com/
PATH: /

HEADERS (11)

accept: */*
accept-encoding: gzip, br
cf-connecting-ip: 2a03:2880:f808:39::
cf-ipcountry: DE
cf-ray: a545b9c3885fd2db
cf-visitor: {"scheme":"https"}
connection: Keep-Alive
host: header-analyzer.franzai.com
user-agent: facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)
x-forwarded-proto: https
x-real-ip: 2a03:2880:f808:39::

NETWORK

IP: 2a03:2880:f808:39::
TLS: TLSv1.3
PROTOCOL: HTTP/2

LOCATION

COUNTRY: DE
CITY: Frankfurt am Main
ASN: 32934

JAVASCRIPT DETECTION

Status: NO JS SUPPORTED
JavaScript was not executed for this request

DETECTIVE ANALYSIS

Referrer Analysis

Source: Direct Visit
Full Referrer: Direct

Bot Detection Summary

Bot Probability: 0%
Confidence: 100%
Identified as: Meta Meta-ExternalAgent

Suspicious Indicators

- AI training crawler for Meta's Llama and social media models

User Agent

facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)

Raw JSON Data

{
  "id": "15e49c2e-f1b8-486d-9546-16dde692d812",
  "timestamp": "2026-11-02T20:00:28.789Z",
  "timestampMs": 1793649628789,
  "request": {
    "method": "GET",
    "url": "https://header-analyzer.franzai.com/",
    "path": "/",
    "host": "header-analyzer.franzai.com"
  },
  "headers": {
    "accept": "*/*",
    "accept-encoding": "gzip, br",
    "cf-connecting-ip": "2a03:2880:f808:39::",
    "cf-ipcountry": "DE",
    "cf-ray": "a545b9c3885fd2db",
    "cf-visitor": "{\"scheme\":\"https\"}",
    "connection": "Keep-Alive",
    "host": "header-analyzer.franzai.com",
    "user-agent": "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)",
    "x-forwarded-proto": "https",
    "x-real-ip": "2a03:2880:f808:39::"
  },
  "cookies": {},
  "query": {},
  "network": {
    "ip": "2a03:2880:f808:39::",
    "country": "DE",
    "city": "Frankfurt am Main",
    "asn": 32934
  },
  "geo": {
    "country": "DE",
    "city": "Frankfurt am Main",
    "asn": 32934,
    "colo": "FRA"
  },
  "bot": {
    "isBot": true,
    "probableBot": false,
    "confidence": 100,
    "suspiciousScore": 0,
    "spoofed": false,
    "uaVerified": true,
    "uaClaim": "Meta-ExternalAgent",
    "botName": "Meta-ExternalAgent",
    "operator": "Meta",
    "operatorSource": "rule",
    "type": "AI Training",
    "ruleId": "meta-external",
    "detectionReason": "AI training crawler for Meta's Llama and social media models",
    "reasons": [
      "AI training crawler for Meta's Llama and social media models"
    ],
    "rulesVersion": "d5662f0e0a20"
  },
  "cf": {
    "httpProtocol": "HTTP/2",
    "clientAcceptEncoding": "gzip, deflate",
    "requestPriority": "weight=16;exclusive=0;group=0;group-weight=0",
    "edgeRequestKeepAliveStatus": 1,
    "requestHeaderNames": [
      ":method",
      ":scheme",
      ":path",
      ":authority",
      "accept",
      "accept-encoding",
      "user-agent"
    ],
    "clientTcpRtt": 1,
    "clientQuicRtt": 0,
    "colo": "FRA",
    "asn": 32934,
    "asOrganization": "Meta Platforms Ireland Limited",
    "country": "DE",
    "isEUCountry": "1",
    "city": "Frankfurt am Main",
    "continent": "EU",
    "region": "Hesse",
    "regionCode": "HE",
    "timezone": "Europe/Berlin",
    "longitude": "8.68417",
    "latitude": "50.11552",
    "postalCode": "60306",
    "tlsVersion": "TLSv1.3",
    "tlsCipher": "AEAD-AES256-GCM-SHA384",
    "tlsClientRandom": "NPH62F39FAF1+GS6vM5ggxz3y498BugtuxEG8V2eplc=",
    "tlsClientCiphersSha1": "GXSPDLP4G3X+prK73a4wBuOaHRc=",
    "tlsClientExtensionsSha1": "Y7DIC8A6G0/aXviZ8ie/xDbJb7g=",
    "tlsClientExtensionsSha1Le": "6e+q3vPm88rSgMTN/h7WTTxQ2wQ=",
    "tlsExportedAuthenticator": {
      "clientHandshake": "868bdc95d5882a9b856d0ec7c6fc0beec71848be47918e1e3b16af4754094757731b0ad51d87fed6525971d7f29f57c7",
      "serverHandshake": "a84af07341aabe59fbccb83cc9d885ce584c388153789997c98cc0742a21cbff3301f16e76da5c1d702be5745f0f6306",
      "clientFinished": "d3af9aad280d5e5cce1d2f7de13d6e932de6d80fe858f0a027a57352ef86ae6a217c36ade283a4535d61ce9b7a5fe891",
      "serverFinished": "9f9a408655c49ad89b38b952c905b09d86546c4db8d0744adf750aa3388b3fcf4ab1f0b17de5df06591072e9c94b88c8"
    },
    "tlsClientHelloLength": "334",
    "tlsClientAuth": {
      "certPresented": "0",
      "certVerified": "NONE",
      "certRevoked": "0",
      "certIssuerDN": "",
      "certSubjectDN": "",
      "certIssuerDNRFC2253": "",
      "certSubjectDNRFC2253": "",
      "certIssuerDNLegacy": "",
      "certSubjectDNLegacy": "",
      "certSerial": "",
      "certIssuerSerial": "",
      "certSKI": "",
      "certIssuerSKI": "",
      "certFingerprintSHA1": "",
      "certFingerprintSHA256": "",
      "certNotBefore": "",
      "certNotAfter": "",
      "certRFC9440": "",
      "certRFC9440TooLarge": false,
      "certChainRFC9440": "",
      "certChainRFC9440TooLarge": false
    },
    "verifiedBotCategory": "Page Preview",
    "edgeL4": {
      "deliveryRate": 3271844
    }
  },
  "jsData": null
}