REQUEST DETAILS - COMPREHENSIVE ANALYSIS
REQUEST ID: 50d573e4-6aa3-4c68-ad6b-731ae3d0e706
2026-06-29T19:09:54.921Z
45.33.100.49
BOT
BOT DETECTION RESULT
STATUS: BOT
CONFIDENCE: 75%
OPERATOR: Linode
TYPE: Suspected Bot
WHY BOT:
- No Accept-Language
- No cookies
- Browser UA missing client hints
- Browser UA with API-style headers
REQUEST INFO
ID: 50d573e4-6aa3-4c68-ad6b-731ae3d0e706
TIME: 2026-06-29T19:09:54.921Z
METHOD: GET
URL: https://header-analyzer.franzai.com/.env.bak
PATH: /.env.bak
HEADERS (11)
accept: text/plain, */*
accept-encoding: gzip, br
cf-connecting-ip: 45.33.100.49
cf-ipcountry: US
cf-ray: a1373a720b56e886
cf-visitor: {"scheme":"https"}
connection: Keep-Alive
host: header-analyzer.franzai.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
x-forwarded-proto: https
x-real-ip: 45.33.100.49
NETWORK
IP: 45.33.100.49
TLS: TLSv1.3
PROTOCOL: HTTP/1.1
LOCATION
COUNTRY: US
CITY: Atlanta
ASN: 63949
JAVASCRIPT DETECTION
Status: NO JS SUPPORTED
JavaScript was not executed for this request
- Likely a bot, crawler, or API client
- JavaScript disabled in browser
- Server-side request (curl, wget, etc)
DETECTIVE ANALYSIS
Referrer Analysis
Source: Direct Visit
Full Referrer: Direct
Bot Detection Summary
Bot Probability: 75%
Confidence: 75%
Identified as: Linode
Suspicious Indicators
- No Accept-Language
- No cookies
- Browser UA missing client hints
- Browser UA with API-style headers
User Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Raw JSON Data
{
"id": "50d573e4-6aa3-4c68-ad6b-731ae3d0e706",
"timestamp": "2026-06-29T19:09:54.921Z",
"timestampMs": 1782760194921,
"request": {
"method": "GET",
"url": "https://header-analyzer.franzai.com/.env.bak",
"path": "/.env.bak",
"host": "header-analyzer.franzai.com"
},
"headers": {
"accept": "text/plain, */*",
"accept-encoding": "gzip, br",
"cf-connecting-ip": "45.33.100.49",
"cf-ipcountry": "US",
"cf-ray": "a1373a720b56e886",
"cf-visitor": "{\"scheme\":\"https\"}",
"connection": "Keep-Alive",
"host": "header-analyzer.franzai.com",
"user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36",
"x-forwarded-proto": "https",
"x-real-ip": "45.33.100.49"
},
"cookies": {},
"query": {},
"network": {
"ip": "45.33.100.49",
"country": "US",
"city": "Atlanta",
"asn": 63949
},
"geo": {
"country": "US",
"city": "Atlanta",
"asn": 63949,
"colo": "ATL"
},
"bot": {
"isBot": true,
"spoofed": false,
"uaVerified": false,
"uaClaim": null,
"botName": null,
"operator": "Linode",
"operatorSource": "cf-as-org",
"type": "Suspected Bot",
"confidence": 75,
"suspiciousScore": 75,
"probableBot": false,
"reasons": [
"No Accept-Language",
"No cookies",
"Browser UA missing client hints",
"Browser UA with API-style headers"
],
"rulesVersion": "d5662f0e0a20"
},
"cf": {
"httpProtocol": "HTTP/1.1",
"clientAcceptEncoding": "gzip, deflate",
"requestPriority": "",
"edgeRequestKeepAliveStatus": 1,
"requestHeaderNames": {},
"clientTcpRtt": 0,
"clientQuicRtt": 0,
"colo": "ATL",
"asn": 63949,
"asOrganization": "Linode",
"country": "US",
"isEUCountry": false,
"city": "Atlanta",
"continent": "NA",
"region": "Georgia",
"regionCode": "GA",
"timezone": "America/New_York",
"longitude": "-84.38798",
"latitude": "33.749",
"postalCode": "30303",
"metroCode": "524",
"tlsVersion": "TLSv1.3",
"tlsCipher": "AEAD-AES256-GCM-SHA384",
"tlsClientRandom": "Zdv/fEJcxH//yCmImRGdK7X9lvPYX8a7bZFerupa2xo=",
"tlsClientCiphersSha1": "PPJlK7s0reMX4JkzHIaXBcX3W2k=",
"tlsClientExtensionsSha1": "tlH5gnoC5Z1HF45J5OgHEi338V0=",
"tlsClientExtensionsSha1Le": "mRCkyUCRFDTLCNHGQsZNFhkU1/4=",
"tlsExportedAuthenticator": {
"clientHandshake": "0dc5d5b1c217d38d587309fb9858f3f3a7d1b5a1e9307825ef8ce067a8e6995096150fa743619469fa21086a45c5b658",
"serverHandshake": "f42cd22648fc9bcc8cd5aba6c3388ad3e7e63a4fac9fe1410ab792b7528728f1c1b8284a27b93edaaa42490685953aee",
"clientFinished": "55443578df89a25d0640ddad3c4cba7c843dbb86a67f9e43f207b01c9bb5addee6ba7391f975c6b9850b35c71bab1bbe",
"serverFinished": "3856a972f4824b7c07d2d506dfcd242b50dd6d869caf7cbed2c7709d7d3410691dff487909367ef919c54bc910d69acf"
},
"tlsClientHelloLength": "508",
"tlsClientAuth": {
"certPresented": "0",
"certVerified": "NONE",
"certRevoked": "0",
"certIssuerDN": "",
"certSubjectDN": "",
"certIssuerDNRFC2253": "",
"certSubjectDNRFC2253": "",
"certIssuerDNLegacy": "",
"certSubjectDNLegacy": "",
"certSerial": "",
"certIssuerSerial": "",
"certSKI": "",
"certIssuerSKI": "",
"certFingerprintSHA1": "",
"certFingerprintSHA256": "",
"certNotBefore": "",
"certNotAfter": "",
"certRFC9440": "",
"certRFC9440TooLarge": false,
"certChainRFC9440": "",
"certChainRFC9440TooLarge": false
},
"verifiedBotCategory": "",
"edgeL4": {
"deliveryRate": 3447461
}
},
"jsData": null
}