REQUEST DETAILS - COMPREHENSIVE ANALYSIS
REQUEST ID: 18f2003f-16f1-420d-af33-7ea523a623df
2026-10-26T10:16:39.145Z
34.233.223.24
HUMAN
BOT DETECTION RESULT
STATUS: HUMAN
CONFIDENCE: 85%
WHY HUMAN: Mostly normal browser behavior
REQUEST INFO
ID: 18f2003f-16f1-420d-af33-7ea523a623df
TIME: 2026-10-26T10:16:39.145Z
METHOD: GET
URL: https://header-analyzer.franzai.com/configuration.php.bak
PATH: /configuration.php.bak
HEADERS (21)
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
accept-encoding: gzip, br
accept-language: en-US,en;q=0.9
cf-connecting-ip: 34.233.223.24
cf-ipcountry: US
cf-ray: a508b4ec7f51d6f5
cf-visitor: {"scheme":"https"}
connection: Keep-Alive
host: header-analyzer.franzai.com
priority: u=0, i
sec-ch-ua: "Chromium";v="152", "Not?A_Brand";v="24", "Google Chrome";v="152"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: none
sec-fetch-user: ?1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
x-forwarded-proto: https
x-real-ip: 34.233.223.24
NETWORK
IP: 34.233.223.24
TLS: TLSv1.3
PROTOCOL: HTTP/2
LOCATION
COUNTRY: US
CITY: Ashburn
ASN: 14618
JAVASCRIPT DETECTION
Status: NO JS SUPPORTED
JavaScript was not executed for this request
- Likely a bot, crawler, or API client
- JavaScript disabled in browser
- Server-side request (curl, wget, etc)
DETECTIVE ANALYSIS
Referrer Analysis
Source: Direct Visit
Full Referrer: Direct
Bot Detection Summary
Bot Probability: 15%
Confidence: 85%
Suspicious Indicators
User Agent
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
Raw JSON Data
{
"id": "18f2003f-16f1-420d-af33-7ea523a623df",
"timestamp": "2026-10-26T10:16:39.145Z",
"timestampMs": 1793009799145,
"request": {
"method": "GET",
"url": "https://header-analyzer.franzai.com/configuration.php.bak",
"path": "/configuration.php.bak",
"host": "header-analyzer.franzai.com"
},
"headers": {
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, br",
"accept-language": "en-US,en;q=0.9",
"cf-connecting-ip": "34.233.223.24",
"cf-ipcountry": "US",
"cf-ray": "a508b4ec7f51d6f5",
"cf-visitor": "{\"scheme\":\"https\"}",
"connection": "Keep-Alive",
"host": "header-analyzer.franzai.com",
"priority": "u=0, i",
"sec-ch-ua": "\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "document",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "none",
"sec-fetch-user": "?1",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36",
"x-forwarded-proto": "https",
"x-real-ip": "34.233.223.24"
},
"cookies": {},
"query": {},
"network": {
"ip": "34.233.223.24",
"country": "US",
"city": "Ashburn",
"asn": 14618
},
"geo": {
"country": "US",
"city": "Ashburn",
"asn": 14618,
"colo": "IAD"
},
"bot": {
"isBot": false,
"spoofed": false,
"uaVerified": false,
"uaClaim": null,
"botName": null,
"operator": null,
"operatorSource": null,
"type": null,
"confidence": 85,
"suspiciousScore": 15,
"probableBot": false,
"reasons": [
"No cookies"
],
"rulesVersion": "d5662f0e0a20"
},
"cf": {
"httpProtocol": "HTTP/2",
"clientAcceptEncoding": "gzip, deflate, br",
"requestPriority": "weight=256;exclusive=1",
"edgeRequestKeepAliveStatus": 1,
"requestHeaderNames": [
":method",
":authority",
":scheme",
":path",
"sec-ch-ua",
"sec-ch-ua-mobile",
"sec-ch-ua-platform",
"upgrade-insecure-requests",
"user-agent",
"accept",
"sec-fetch-site",
"sec-fetch-mode",
"sec-fetch-user",
"sec-fetch-dest",
"accept-encoding",
"accept-language",
"priority"
],
"clientTcpRtt": 2,
"clientQuicRtt": 0,
"colo": "IAD",
"asn": 14618,
"asOrganization": "Amazon Technologies Inc.",
"country": "US",
"isEUCountry": false,
"city": "Ashburn",
"continent": "NA",
"region": "Virginia",
"regionCode": "VA",
"timezone": "America/New_York",
"longitude": "-77.48749",
"latitude": "39.04372",
"postalCode": "20147",
"metroCode": "511",
"tlsVersion": "TLSv1.3",
"tlsCipher": "AEAD-AES128-GCM-SHA256",
"tlsClientRandom": "Q1NahRktmigBBv7y3wIbsSbRsB6sYVDUo3NY6gRaOAM=",
"tlsClientCiphersSha1": "sQ7eseNxgre8sddpKo+nF01osZc=",
"tlsClientExtensionsSha1": "VCb+NiOEazcht3D0NssscoD3S6A=",
"tlsClientExtensionsSha1Le": "pY54wK8epiQF5xRBLsiusHvlTys=",
"tlsExportedAuthenticator": {
"clientHandshake": "6708aa3b34014e213e3d33f5cd1e6dcfcb7c4b598e607bfe50e79d0ad21b8e20",
"serverHandshake": "b5b65ecae5f6cf1bd7b951a91de8631a6ad8d70024095956c8ac1b5946b677eb",
"clientFinished": "f42a5800894ab1dd26c2cefb426f02ee5f82290133bbbbfadae6a4af57cfb0d8",
"serverFinished": "32604adb78a7b365218de50cd59553f98539c8edb59c6a71d2590daaff7c2479"
},
"tlsClientHelloLength": "1990",
"tlsClientAuth": {
"certPresented": "0",
"certVerified": "NONE",
"certRevoked": "0",
"certIssuerDN": "",
"certSubjectDN": "",
"certIssuerDNRFC2253": "",
"certSubjectDNRFC2253": "",
"certIssuerDNLegacy": "",
"certSubjectDNLegacy": "",
"certSerial": "",
"certIssuerSerial": "",
"certSKI": "",
"certIssuerSKI": "",
"certFingerprintSHA1": "",
"certFingerprintSHA256": "",
"certNotBefore": "",
"certNotAfter": "",
"certRFC9440": "",
"certRFC9440TooLarge": false,
"certChainRFC9440": "",
"certChainRFC9440TooLarge": false
},
"verifiedBotCategory": "",
"edgeL4": {
"deliveryRate": 2653634
}
},
"jsData": null
}