REQUEST DETAILS - COMPREHENSIVE ANALYSIS
REQUEST ID: 94a844f0-ea98-4ff4-a275-7e028649eb00
2025-09-24T21:11:00.863Z
2a01:4f8:c012:b85c::1
MAYBE BOT
BOT DETECTION RESULT
STATUS: MAYBE BOT
CONFIDENCE: 60%
OPERATOR: cURL
BOT NAME: cURL
TYPE: Developer Tool
WHY MAYBE BOT:
- Command-line tool for transferring data and testing HTTP requests
REQUEST INFO
ID: 94a844f0-ea98-4ff4-a275-7e028649eb00
TIME: 2025-09-24T21:11:00.863Z
METHOD: undefined
URL: undefined
PATH: undefined
HEADERS (11)
accept: */*
accept-encoding: gzip, br
cf-connecting-ip: 2a01:4f8:c012:b85c::1
cf-ipcountry: DE
cf-ray: 984545961e0ad396
cf-visitor: {"scheme":"https"}
connection: Keep-Alive
host: header-analyzer.franzai.com
user-agent: curl/7.68.0
x-forwarded-proto: https
x-real-ip: 2a01:4f8:c012:b85c::1
NETWORK
IP: 2a01:4f8:c012:b85c::1
TLS: unknown
PROTOCOL: unknown
LOCATION
COUNTRY: DE
CITY: Falkenstein
ASN: 24940
JAVASCRIPT DETECTION
Status: NO JS SUPPORTED
JavaScript was not executed for this request
- Likely a bot, crawler, or API client
- JavaScript disabled in browser
- Server-side request (curl, wget, etc)
DETECTIVE ANALYSIS
Referrer Analysis
Source: Direct Visit
Full Referrer: Direct
Bot Detection Summary
Bot Probability: 60%
Confidence: 60%
Status: Probable Bot
Suspicious Indicators
- Command-line tool for transferring data and testing HTTP requests
User Agent
Raw JSON Data
{
"id": "94a844f0-ea98-4ff4-a275-7e028649eb00",
"timestamp": "2025-09-24T21:11:00.863Z",
"timestampMs": 1758748260863,
"request": {
"method": "GET",
"url": "https://header-analyzer.franzai.com/",
"path": "/",
"host": "header-analyzer.franzai.com"
},
"headers": {
"accept": "*/*",
"accept-encoding": "gzip, br",
"cf-connecting-ip": "2a01:4f8:c012:b85c::1",
"cf-ipcountry": "DE",
"cf-ray": "984545961e0ad396",
"cf-visitor": "{\"scheme\":\"https\"}",
"connection": "Keep-Alive",
"host": "header-analyzer.franzai.com",
"user-agent": "curl/7.68.0",
"x-forwarded-proto": "https",
"x-real-ip": "2a01:4f8:c012:b85c::1"
},
"cookies": {},
"query": {},
"network": {
"ip": "2a01:4f8:c012:b85c::1",
"country": "DE",
"city": "Falkenstein",
"asn": 24940
},
"geo": {
"country": "DE",
"city": "Falkenstein",
"asn": 24940,
"colo": "FRA"
},
"bot": {
"isBot": false,
"botName": "cURL",
"operator": "cURL",
"type": "Developer Tool",
"confidence": 60,
"suspiciousScore": 60,
"probableBot": true,
"ruleId": "curl",
"detectionReason": "Command-line tool for transferring data and testing HTTP requests",
"reasons": [
"Command-line tool for transferring data and testing HTTP requests"
]
},
"cf": {
"clientTcpRtt": 6,
"requestHeaderNames": {},
"httpProtocol": "HTTP/2",
"tlsCipher": "AEAD-AES256-GCM-SHA384",
"continent": "EU",
"asn": 24940,
"verifiedBotCategory": "",
"country": "DE",
"isEUCountry": "1",
"region": "Saxony",
"tlsClientCiphersSha1": "OsJ8/T1c7cIzACxNm6+ohe+VMtk=",
"tlsClientAuth": {
"certIssuerDNLegacy": "",
"certIssuerSKI": "",
"certSubjectDNRFC2253": "",
"certSubjectDNLegacy": "",
"certFingerprintSHA256": "",
"certNotBefore": "",
"certSKI": "",
"certSerial": "",
"certIssuerDN": "",
"certVerified": "NONE",
"certNotAfter": "",
"certSubjectDN": "",
"certPresented": "0",
"certRevoked": "0",
"certIssuerSerial": "",
"certIssuerDNRFC2253": "",
"certFingerprintSHA1": ""
},
"tlsClientRandom": "agU1rujQnrNbU83H0xf7C6d/X++qGE16MtBcVUchW1A=",
"tlsExportedAuthenticator": {
"clientFinished": "e1a98935305445b5bafc89de968ce321b925aef752ad896dd57a1c047e4ef839e6dbbc16a4f4ffd9feac3fc230d666be",
"clientHandshake": "8491581fd57115f9958ae4e4284991363e16926f488ea1ac1fc76e6412cc25af9edfd1612c724345ae64035d995728b2",
"serverHandshake": "313a74fdc588a50fa9bcda8720ab83e0511e4d8a0a38273d4db255e93e7f4fcb93d1e169d46bf4b0e3080696f4929ac4",
"serverFinished": "7c0ba538e59c8e4abf6ab0c3332c3ef41b75c9466069122cb856c6bfa71601f156ed9922ae8ded374b4cea87ec84e568"
},
"tlsClientHelloLength": "508",
"colo": "FRA",
"timezone": "Europe/Berlin",
"longitude": "12.37129",
"latitude": "50.47788",
"edgeRequestKeepAliveStatus": 1,
"requestPriority": "weight=16;exclusive=0;group=0;group-weight=0",
"postalCode": "08520",
"city": "Falkenstein",
"tlsVersion": "TLSv1.3",
"regionCode": "SN",
"asOrganization": "Hetzner Online GmbH",
"tlsClientExtensionsSha1Le": "dzoqWK9CN8nzVoKtSqow/LG2T4I=",
"tlsClientExtensionsSha1": "ZwjN0Ez5zfm3gdQ3iRUt5M/OgIU="
},
"jsData": null
}