REQUEST DETAILS - COMPREHENSIVE ANALYSIS

REQUEST ID: 9b5ecd5e-e300-4f25-b76d-10d38588155e

2026-10-23T04:01:03.576Z 2a03:2880:f808:51:: BOT

BOT DETECTION RESULT

STATUS: BOT
CONFIDENCE: 100%
OPERATOR: Meta
BOT NAME: Meta-ExternalAgent
TYPE: AI Training
UA CLAIM: Meta-ExternalAgent | CLOUDFLARE VERIFIED: yes (Page Preview)
WHY BOT:
  • AI training crawler for Meta's Llama and social media models

REQUEST INFO

ID: 9b5ecd5e-e300-4f25-b76d-10d38588155e
TIME: 2026-10-23T04:01:03.576Z
METHOD: GET
URL: https://header-analyzer.franzai.com/
PATH: /

HEADERS (11)

accept: */*
accept-encoding: gzip, br
cf-connecting-ip: 2a03:2880:f808:51::
cf-ipcountry: DE
cf-ray: a4edd69d1b385d97
cf-visitor: {"scheme":"https"}
connection: Keep-Alive
host: header-analyzer.franzai.com
user-agent: facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)
x-forwarded-proto: https
x-real-ip: 2a03:2880:f808:51::

NETWORK

IP: 2a03:2880:f808:51::
TLS: TLSv1.3
PROTOCOL: HTTP/2

LOCATION

COUNTRY: DE
CITY: Frankfurt am Main
ASN: 32934

JAVASCRIPT DETECTION

Status: NO JS SUPPORTED
JavaScript was not executed for this request

DETECTIVE ANALYSIS

Referrer Analysis

Source: Direct Visit
Full Referrer: Direct

Bot Detection Summary

Bot Probability: 0%
Confidence: 100%
Identified as: Meta Meta-ExternalAgent

Suspicious Indicators

- AI training crawler for Meta's Llama and social media models

User Agent

facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)

Raw JSON Data

{
  "id": "9b5ecd5e-e300-4f25-b76d-10d38588155e",
  "timestamp": "2026-10-23T04:01:03.576Z",
  "timestampMs": 1792728063576,
  "request": {
    "method": "GET",
    "url": "https://header-analyzer.franzai.com/",
    "path": "/",
    "host": "header-analyzer.franzai.com"
  },
  "headers": {
    "accept": "*/*",
    "accept-encoding": "gzip, br",
    "cf-connecting-ip": "2a03:2880:f808:51::",
    "cf-ipcountry": "DE",
    "cf-ray": "a4edd69d1b385d97",
    "cf-visitor": "{\"scheme\":\"https\"}",
    "connection": "Keep-Alive",
    "host": "header-analyzer.franzai.com",
    "user-agent": "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)",
    "x-forwarded-proto": "https",
    "x-real-ip": "2a03:2880:f808:51::"
  },
  "cookies": {},
  "query": {},
  "network": {
    "ip": "2a03:2880:f808:51::",
    "country": "DE",
    "city": "Frankfurt am Main",
    "asn": 32934
  },
  "geo": {
    "country": "DE",
    "city": "Frankfurt am Main",
    "asn": 32934,
    "colo": "FRA"
  },
  "bot": {
    "isBot": true,
    "probableBot": false,
    "confidence": 100,
    "suspiciousScore": 0,
    "spoofed": false,
    "uaVerified": true,
    "uaClaim": "Meta-ExternalAgent",
    "botName": "Meta-ExternalAgent",
    "operator": "Meta",
    "operatorSource": "rule",
    "type": "AI Training",
    "ruleId": "meta-external",
    "detectionReason": "AI training crawler for Meta's Llama and social media models",
    "reasons": [
      "AI training crawler for Meta's Llama and social media models"
    ],
    "rulesVersion": "d5662f0e0a20"
  },
  "cf": {
    "httpProtocol": "HTTP/2",
    "clientAcceptEncoding": "gzip, deflate",
    "requestPriority": "weight=16;exclusive=0;group=0;group-weight=0",
    "edgeRequestKeepAliveStatus": 1,
    "requestHeaderNames": [
      ":method",
      ":scheme",
      ":path",
      ":authority",
      "accept",
      "accept-encoding",
      "user-agent"
    ],
    "clientTcpRtt": 0,
    "clientQuicRtt": 0,
    "colo": "FRA",
    "asn": 32934,
    "asOrganization": "Meta Platforms Ireland Limited",
    "country": "DE",
    "isEUCountry": "1",
    "city": "Frankfurt am Main",
    "continent": "EU",
    "region": "Hesse",
    "regionCode": "HE",
    "timezone": "Europe/Berlin",
    "longitude": "8.68417",
    "latitude": "50.11552",
    "postalCode": "60306",
    "tlsVersion": "TLSv1.3",
    "tlsCipher": "AEAD-AES256-GCM-SHA384",
    "tlsClientRandom": "Ea8WcqDVfBVuISfbs7xah6b+/4TrBbXWiL71rmkOq/g=",
    "tlsClientCiphersSha1": "GXSPDLP4G3X+prK73a4wBuOaHRc=",
    "tlsClientExtensionsSha1": "Y7DIC8A6G0/aXviZ8ie/xDbJb7g=",
    "tlsClientExtensionsSha1Le": "6e+q3vPm88rSgMTN/h7WTTxQ2wQ=",
    "tlsExportedAuthenticator": {
      "clientHandshake": "7cb66765d0d3e57b50655e2af3ce4b57a71644d60a413ef2b93e5e6cdbfc3cbb4849f6af7c6d634999ec428d5e102989",
      "serverHandshake": "08580779ae468b6eafd5c2f43c1184211a58e21c5939290705c916b9e7a32cfd6fc59f745acb3e164ee62693e8083667",
      "clientFinished": "b5db2ac0f8fa8b64b90bc273c1efdd4930f4e9c6da66aaa0ffe81c9d990b56c765cf8f0c6f2b43e5c026ebd2cd1d2a35",
      "serverFinished": "cc1a20d1e68b28fce612ac2d9f05e96d485a0fc43ee6a05e41b15b1d60fa68f0dbd618db189ac9078f08603dad7832dc"
    },
    "tlsClientHelloLength": "334",
    "tlsClientAuth": {
      "certPresented": "0",
      "certVerified": "NONE",
      "certRevoked": "0",
      "certIssuerDN": "",
      "certSubjectDN": "",
      "certIssuerDNRFC2253": "",
      "certSubjectDNRFC2253": "",
      "certIssuerDNLegacy": "",
      "certSubjectDNLegacy": "",
      "certSerial": "",
      "certIssuerSerial": "",
      "certSKI": "",
      "certIssuerSKI": "",
      "certFingerprintSHA1": "",
      "certFingerprintSHA256": "",
      "certNotBefore": "",
      "certNotAfter": "",
      "certRFC9440": "",
      "certRFC9440TooLarge": false,
      "certChainRFC9440": "",
      "certChainRFC9440TooLarge": false
    },
    "verifiedBotCategory": "Page Preview",
    "edgeL4": {
      "deliveryRate": 4574660
    }
  },
  "jsData": null
}