REQUEST DETAILS - COMPREHENSIVE ANALYSIS
REQUEST ID: 7462e747-20bd-49b2-9fb8-5293891092c1
2025-09-24T21:07:23.302Z
2a01:4f8:c012:b85c::1
MAYBE BOT
BOT DETECTION RESULT
STATUS: MAYBE BOT
CONFIDENCE: 60%
OPERATOR: cURL
BOT NAME: cURL
TYPE: Developer Tool
WHY MAYBE BOT:
- User agent matches cURL cURL pattern
REQUEST INFO
ID: 7462e747-20bd-49b2-9fb8-5293891092c1
TIME: 2025-09-24T21:07:23.302Z
METHOD: undefined
URL: undefined
PATH: undefined
HEADERS (11)
accept: */*
accept-encoding: gzip, br
cf-connecting-ip: 2a01:4f8:c012:b85c::1
cf-ipcountry: DE
cf-ray: 984540467a7d3653
cf-visitor: {"scheme":"https"}
connection: Keep-Alive
host: header-analyzer.franzai.com
user-agent: curl/7.68.0
x-forwarded-proto: https
x-real-ip: 2a01:4f8:c012:b85c::1
NETWORK
IP: 2a01:4f8:c012:b85c::1
TLS: unknown
PROTOCOL: unknown
LOCATION
COUNTRY: DE
CITY: Falkenstein
ASN: 24940
JAVASCRIPT DETECTION
Status: NO JS SUPPORTED
JavaScript was not executed for this request
- Likely a bot, crawler, or API client
- JavaScript disabled in browser
- Server-side request (curl, wget, etc)
DETECTIVE ANALYSIS
Referrer Analysis
Source: Direct Visit
Full Referrer: Direct
Bot Detection Summary
Bot Probability: 60%
Confidence: 60%
Status: Probable Bot
Suspicious Indicators
- User agent matches cURL cURL pattern
User Agent
Raw JSON Data
{
"id": "7462e747-20bd-49b2-9fb8-5293891092c1",
"timestamp": "2025-09-24T21:07:23.302Z",
"timestampMs": 1758748043302,
"request": {
"method": "GET",
"url": "https://header-analyzer.franzai.com/",
"path": "/",
"host": "header-analyzer.franzai.com"
},
"headers": {
"accept": "*/*",
"accept-encoding": "gzip, br",
"cf-connecting-ip": "2a01:4f8:c012:b85c::1",
"cf-ipcountry": "DE",
"cf-ray": "984540467a7d3653",
"cf-visitor": "{\"scheme\":\"https\"}",
"connection": "Keep-Alive",
"host": "header-analyzer.franzai.com",
"user-agent": "curl/7.68.0",
"x-forwarded-proto": "https",
"x-real-ip": "2a01:4f8:c012:b85c::1"
},
"cookies": {},
"query": {},
"network": {
"ip": "2a01:4f8:c012:b85c::1",
"country": "DE",
"city": "Falkenstein",
"asn": 24940
},
"geo": {
"country": "DE",
"city": "Falkenstein",
"asn": 24940,
"colo": "FRA"
},
"bot": {
"isBot": false,
"botName": "cURL",
"operator": "cURL",
"type": "Developer Tool",
"confidence": 60,
"suspiciousScore": 60,
"probableBot": true,
"ruleId": "curl",
"detectionReason": "Identified by user agent pattern matching cURL cURL",
"reasons": [
"User agent matches cURL cURL pattern"
]
},
"cf": {
"clientTcpRtt": 5,
"requestHeaderNames": {},
"httpProtocol": "HTTP/2",
"tlsCipher": "AEAD-AES256-GCM-SHA384",
"continent": "EU",
"asn": 24940,
"verifiedBotCategory": "",
"country": "DE",
"isEUCountry": "1",
"region": "Saxony",
"tlsClientCiphersSha1": "OsJ8/T1c7cIzACxNm6+ohe+VMtk=",
"tlsClientAuth": {
"certIssuerDNLegacy": "",
"certIssuerSKI": "",
"certSubjectDNRFC2253": "",
"certSubjectDNLegacy": "",
"certFingerprintSHA256": "",
"certNotBefore": "",
"certSKI": "",
"certSerial": "",
"certIssuerDN": "",
"certVerified": "NONE",
"certNotAfter": "",
"certSubjectDN": "",
"certPresented": "0",
"certRevoked": "0",
"certIssuerSerial": "",
"certIssuerDNRFC2253": "",
"certFingerprintSHA1": ""
},
"tlsClientRandom": "asecu1UKts3k0QCj8/c9/R/K9GZORLXlRpovoRRMe74=",
"tlsExportedAuthenticator": {
"clientFinished": "285960b120548521c81d159b7d520988d24c6dfcba66e1e4ed9acb5d721e9e7fe2b25922eb4c0878855c8b60b1cd9e5a",
"clientHandshake": "7b3934d06f2b357c00dbe979c4eb4fb7b0d535229c8bb9d07848bcc86fae5c7082f201183d6705821323d391a9d190d1",
"serverHandshake": "a1b348ebbb381b38dbdc8eb64a18552d5bfca40797e70d583b01f21a536b284ff2702d1547023ffaaf0c4e652fe5bc0a",
"serverFinished": "7abf719a62add89cdb1ef413083724d00661d70121f8831f43994772ad3312a25a2f989bb05a3e13fbefef31f16f9491"
},
"tlsClientHelloLength": "508",
"colo": "FRA",
"timezone": "Europe/Berlin",
"longitude": "12.37129",
"latitude": "50.47788",
"edgeRequestKeepAliveStatus": 1,
"requestPriority": "weight=16;exclusive=0;group=0;group-weight=0",
"postalCode": "08520",
"city": "Falkenstein",
"tlsVersion": "TLSv1.3",
"regionCode": "SN",
"asOrganization": "Hetzner Online GmbH",
"tlsClientExtensionsSha1Le": "dzoqWK9CN8nzVoKtSqow/LG2T4I=",
"tlsClientExtensionsSha1": "ZwjN0Ez5zfm3gdQ3iRUt5M/OgIU="
},
"jsData": null
}