REQUEST DETAILS - COMPREHENSIVE ANALYSIS
REQUEST ID: 399cbf60-f9c1-4b04-9523-bd12db28cddf
2025-09-24T21:07:06.782Z
2a01:4f8:c012:b85c::1
MAYBE BOT
BOT DETECTION RESULT
STATUS: MAYBE BOT
CONFIDENCE: 60%
OPERATOR: cURL
BOT NAME: cURL
TYPE: Developer Tool
WHY MAYBE BOT:
- User agent matches cURL cURL pattern
REQUEST INFO
ID: 399cbf60-f9c1-4b04-9523-bd12db28cddf
TIME: 2025-09-24T21:07:06.782Z
METHOD: undefined
URL: undefined
PATH: undefined
HEADERS (11)
accept: */*
accept-encoding: gzip, br
cf-connecting-ip: 2a01:4f8:c012:b85c::1
cf-ipcountry: DE
cf-ray: 98453fdf290f1997
cf-visitor: {"scheme":"https"}
connection: Keep-Alive
host: header-analyzer.franzai.com
user-agent: curl/7.68.0
x-forwarded-proto: https
x-real-ip: 2a01:4f8:c012:b85c::1
NETWORK
IP: 2a01:4f8:c012:b85c::1
TLS: unknown
PROTOCOL: unknown
LOCATION
COUNTRY: DE
CITY: Falkenstein
ASN: 24940
JAVASCRIPT DETECTION
Status: NO JS SUPPORTED
JavaScript was not executed for this request
- Likely a bot, crawler, or API client
- JavaScript disabled in browser
- Server-side request (curl, wget, etc)
DETECTIVE ANALYSIS
Referrer Analysis
Source: Direct Visit
Full Referrer: Direct
Bot Detection Summary
Bot Probability: 60%
Confidence: 60%
Status: Probable Bot
Suspicious Indicators
- User agent matches cURL cURL pattern
User Agent
Raw JSON Data
{
"id": "399cbf60-f9c1-4b04-9523-bd12db28cddf",
"timestamp": "2025-09-24T21:07:06.782Z",
"timestampMs": 1758748026782,
"request": {
"method": "GET",
"url": "https://header-analyzer.franzai.com/",
"path": "/",
"host": "header-analyzer.franzai.com"
},
"headers": {
"accept": "*/*",
"accept-encoding": "gzip, br",
"cf-connecting-ip": "2a01:4f8:c012:b85c::1",
"cf-ipcountry": "DE",
"cf-ray": "98453fdf290f1997",
"cf-visitor": "{\"scheme\":\"https\"}",
"connection": "Keep-Alive",
"host": "header-analyzer.franzai.com",
"user-agent": "curl/7.68.0",
"x-forwarded-proto": "https",
"x-real-ip": "2a01:4f8:c012:b85c::1"
},
"cookies": {},
"query": {},
"network": {
"ip": "2a01:4f8:c012:b85c::1",
"country": "DE",
"city": "Falkenstein",
"asn": 24940
},
"geo": {
"country": "DE",
"city": "Falkenstein",
"asn": 24940,
"colo": "FRA"
},
"bot": {
"isBot": false,
"botName": "cURL",
"operator": "cURL",
"type": "Developer Tool",
"confidence": 60,
"suspiciousScore": 60,
"probableBot": true,
"ruleId": "curl",
"detectionReason": "Identified by user agent pattern matching cURL cURL",
"reasons": [
"User agent matches cURL cURL pattern"
]
},
"cf": {
"clientTcpRtt": 5,
"requestHeaderNames": {},
"httpProtocol": "HTTP/2",
"tlsCipher": "AEAD-AES256-GCM-SHA384",
"continent": "EU",
"asn": 24940,
"verifiedBotCategory": "",
"country": "DE",
"isEUCountry": "1",
"region": "Saxony",
"tlsClientCiphersSha1": "OsJ8/T1c7cIzACxNm6+ohe+VMtk=",
"tlsClientAuth": {
"certIssuerDNLegacy": "",
"certIssuerSKI": "",
"certSubjectDNRFC2253": "",
"certSubjectDNLegacy": "",
"certFingerprintSHA256": "",
"certNotBefore": "",
"certSKI": "",
"certSerial": "",
"certIssuerDN": "",
"certVerified": "NONE",
"certNotAfter": "",
"certSubjectDN": "",
"certPresented": "0",
"certRevoked": "0",
"certIssuerSerial": "",
"certIssuerDNRFC2253": "",
"certFingerprintSHA1": ""
},
"tlsClientRandom": "2+wGHBGYgvJY62umOjHp7oki7hJPdDCQofaTtzjoxtI=",
"tlsExportedAuthenticator": {
"clientFinished": "fb26aa7411ff3876e19e7b6a1d9875681a5235f73fd9d81849a46f00db91b0a9387d42fe5d3f324af4a960aefe7f4904",
"clientHandshake": "2dbe32e0568fc36ed5d2efa7f84b4652a0133e79ba5d4fb33b20758a3b92327ccef1230aa4641183c7c91e568e9c7fb8",
"serverHandshake": "2dd17fd25d797fb83e0c141fde38b84007bccc81da7ca571ab4997b943b2ec080b00f62e6714024ee1521dd755772a40",
"serverFinished": "82d0acb1491b6e4f4ca116ea88eaedef109d5eab3c9baa9a5cc0d784a28b337eb49d3a3fa1614d9d64db51f41ee6e687"
},
"tlsClientHelloLength": "508",
"colo": "FRA",
"timezone": "Europe/Berlin",
"longitude": "12.37129",
"latitude": "50.47788",
"edgeRequestKeepAliveStatus": 1,
"requestPriority": "weight=16;exclusive=0;group=0;group-weight=0",
"postalCode": "08520",
"city": "Falkenstein",
"tlsVersion": "TLSv1.3",
"regionCode": "SN",
"asOrganization": "Hetzner Online GmbH",
"tlsClientExtensionsSha1Le": "dzoqWK9CN8nzVoKtSqow/LG2T4I=",
"tlsClientExtensionsSha1": "ZwjN0Ez5zfm3gdQ3iRUt5M/OgIU="
},
"jsData": null
}