REQUEST DETAILS - COMPREHENSIVE ANALYSIS
REQUEST ID: 18e82f9c-eb45-4a74-b885-0009215833f4
2026-05-01T19:49:09.451Z
18.221.236.171
SPOOFED BOT
BOT DETECTION RESULT
STATUS: SPOOFED BOT
CONFIDENCE: 100%
OPERATOR: Amazon Technologies Inc.
BOT NAME: ClaudeBot
TYPE: Spoofed Bot
UA CLAIM: ClaudeBot | CLOUDFLARE VERIFIED: no
WHY SPOOFED BOT:
- claims to be ClaudeBot - not verified by Cloudflare
REQUEST INFO
ID: 18e82f9c-eb45-4a74-b885-0009215833f4
TIME: 2026-05-01T19:49:09.451Z
METHOD: GET
URL: https://header-analyzer.franzai.com/robots.txt
PATH: /robots.txt
HEADERS (13)
accept: */*
accept-encoding: gzip, br
accept-language: *
cf-connecting-ip: 18.221.236.171
cf-ipcountry: US
cf-ray: 9f514ecb591ba23e
cf-visitor: {"scheme":"https"}
connection: Keep-Alive
host: header-analyzer.franzai.com
sec-fetch-mode: cors
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; +claudebot@anthropic.com)
x-forwarded-proto: https
x-real-ip: 18.221.236.171
NETWORK
IP: 18.221.236.171
TLS: TLSv1.3
PROTOCOL: HTTP/1.1
LOCATION
COUNTRY: US
CITY: Columbus
ASN: 16509
JAVASCRIPT DETECTION
Status: NO JS SUPPORTED
JavaScript was not executed for this request
- Likely a bot, crawler, or API client
- JavaScript disabled in browser
- Server-side request (curl, wget, etc)
DETECTIVE ANALYSIS
Referrer Analysis
Source: Direct Visit
Full Referrer: Direct
Bot Detection Summary
Bot Probability: 100%
Confidence: 100%
Identified as: Amazon Technologies Inc. ClaudeBot
Suspicious Indicators
- claims to be ClaudeBot - not verified by Cloudflare
User Agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; +claudebot@anthropic.com)
Raw JSON Data
{
"id": "18e82f9c-eb45-4a74-b885-0009215833f4",
"timestamp": "2026-05-01T19:49:09.451Z",
"timestampMs": 1777664949451,
"request": {
"method": "GET",
"url": "https://header-analyzer.franzai.com/robots.txt",
"path": "/robots.txt",
"host": "header-analyzer.franzai.com"
},
"headers": {
"accept": "*/*",
"accept-encoding": "gzip, br",
"accept-language": "*",
"cf-connecting-ip": "18.221.236.171",
"cf-ipcountry": "US",
"cf-ray": "9f514ecb591ba23e",
"cf-visitor": "{\"scheme\":\"https\"}",
"connection": "Keep-Alive",
"host": "header-analyzer.franzai.com",
"sec-fetch-mode": "cors",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; ClaudeBot/1.0; +claudebot@anthropic.com)",
"x-forwarded-proto": "https",
"x-real-ip": "18.221.236.171"
},
"cookies": {},
"query": {},
"network": {
"ip": "18.221.236.171",
"country": "US",
"city": "Columbus",
"asn": 16509
},
"geo": {
"country": "US",
"city": "Columbus",
"asn": 16509,
"colo": "CMH"
},
"bot": {
"isBot": true,
"probableBot": false,
"confidence": 100,
"suspiciousScore": 100,
"spoofed": true,
"uaVerified": false,
"uaClaim": "ClaudeBot",
"botName": "ClaudeBot",
"operator": "Amazon Technologies Inc.",
"operatorSource": "cf-as-org",
"type": "Spoofed Bot",
"ruleId": "anthropic-claude",
"detectionReason": "claims to be ClaudeBot - not verified by Cloudflare",
"reasons": [
"claims to be ClaudeBot - not verified by Cloudflare"
],
"rulesVersion": "d5662f0e0a20"
},
"cf": {
"httpProtocol": "HTTP/1.1",
"clientAcceptEncoding": "gzip, deflate, br",
"requestPriority": "",
"edgeRequestKeepAliveStatus": 1,
"requestHeaderNames": {},
"clientTcpRtt": 1,
"clientQuicRtt": 0,
"colo": "CMH",
"asn": 16509,
"asOrganization": "Amazon Technologies Inc.",
"country": "US",
"isEUCountry": false,
"city": "Columbus",
"continent": "NA",
"region": "Ohio",
"regionCode": "OH",
"timezone": "America/New_York",
"longitude": "-82.99879",
"latitude": "39.96118",
"postalCode": "43215",
"metroCode": "535",
"tlsVersion": "TLSv1.3",
"tlsCipher": "AEAD-AES256-GCM-SHA384",
"tlsClientRandom": "w4VMMnVEVc8kzfnr+uYzrtwbLVVKeaPZgWSx7VDtx2c=",
"tlsClientCiphersSha1": "JZtiTn8H/ntxORk+XXvU2EvNoz8=",
"tlsClientExtensionsSha1": "Y7DIC8A6G0/aXviZ8ie/xDbJb7g=",
"tlsClientExtensionsSha1Le": "6e+q3vPm88rSgMTN/h7WTTxQ2wQ=",
"tlsExportedAuthenticator": {
"clientHandshake": "229cde3edb54a32014f65159c80e83eb6f2a3d50e00e34b833cf3fdbca8aa285b37d8500554b72c1225514eedf076579",
"serverHandshake": "b7711345756b15406a65db5d743deb1a14c0a7ae457b0adbcc84fe3e10396b60a2cca6a3ddd5fba8a702d6352524251d",
"clientFinished": "05030c318fddc8417e0094f3148c85ab277f6695f7aad288a413e9bcaa1eebfb2f0f62e0dbe6bd28fd56ccc038fbc711",
"serverFinished": "60c30f94dcd4b1b5fa34d8cd5fd8c2aab33a08d0c0c5efb49f4b1c02ec7b1ee2235e8239a257f1bef6122fbb9dfcdf3b"
},
"tlsClientHelloLength": "391",
"tlsClientAuth": {
"certPresented": "0",
"certVerified": "NONE",
"certRevoked": "0",
"certIssuerDN": "",
"certSubjectDN": "",
"certIssuerDNRFC2253": "",
"certSubjectDNRFC2253": "",
"certIssuerDNLegacy": "",
"certSubjectDNLegacy": "",
"certSerial": "",
"certIssuerSerial": "",
"certSKI": "",
"certIssuerSKI": "",
"certFingerprintSHA1": "",
"certFingerprintSHA256": "",
"certNotBefore": "",
"certNotAfter": "",
"certRFC9440": "",
"certRFC9440TooLarge": false,
"certChainRFC9440": "",
"certChainRFC9440TooLarge": false
},
"verifiedBotCategory": "",
"edgeL4": {
"deliveryRate": 1509119
}
},
"jsData": null
}