REQUEST DETAILS - COMPREHENSIVE ANALYSIS

REQUEST ID: aac58925-25b5-415e-9024-2c3bbeb2f615

2026-04-28T22:12:47.223Z 208.84.101.224 SPOOFED BOT

BOT DETECTION RESULT

STATUS: SPOOFED BOT
CONFIDENCE: 100%
OPERATOR: Private Customer
BOT NAME: Meta-ExternalAgent
TYPE: Spoofed Bot
UA CLAIM: Meta-ExternalAgent | CLOUDFLARE VERIFIED: no
WHY SPOOFED BOT:
  • claims to be Meta-ExternalAgent - not verified by Cloudflare

REQUEST INFO

ID: aac58925-25b5-415e-9024-2c3bbeb2f615
TIME: 2026-04-28T22:12:47.223Z
METHOD: GET
URL: https://header-analyzer.franzai.com/build-manifest.json
PATH: /build-manifest.json

HEADERS (11)

accept-encoding: gzip, br
cf-connecting-ip: 208.84.101.224
cf-ipcountry: US
cf-ray: 9f396912fca0a9dc
cf-visitor: {"scheme":"https"}
connection: Keep-Alive
host: header-analyzer.franzai.com
user-agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
x-forwarded-for: 208.84.101.224
x-forwarded-proto: https
x-real-ip: 208.84.101.224

NETWORK

IP: 208.84.101.224
TLS: TLSv1.3
PROTOCOL: HTTP/1.1

LOCATION

COUNTRY: US
CITY: Kansas City
ASN: 22295

JAVASCRIPT DETECTION

Status: NO JS SUPPORTED
JavaScript was not executed for this request

DETECTIVE ANALYSIS

Referrer Analysis

Source: Direct Visit
Full Referrer: Direct

Bot Detection Summary

Bot Probability: 100%
Confidence: 100%
Identified as: Private Customer Meta-ExternalAgent

Suspicious Indicators

- claims to be Meta-ExternalAgent - not verified by Cloudflare

User Agent

Mozilla/5.0 (compatible; Meta-ExternalAgent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)

Raw JSON Data

{
  "id": "aac58925-25b5-415e-9024-2c3bbeb2f615",
  "timestamp": "2026-04-28T22:12:47.223Z",
  "timestampMs": 1777414367223,
  "request": {
    "method": "GET",
    "url": "https://header-analyzer.franzai.com/build-manifest.json",
    "path": "/build-manifest.json",
    "host": "header-analyzer.franzai.com"
  },
  "headers": {
    "accept-encoding": "gzip, br",
    "cf-connecting-ip": "208.84.101.224",
    "cf-ipcountry": "US",
    "cf-ray": "9f396912fca0a9dc",
    "cf-visitor": "{\"scheme\":\"https\"}",
    "connection": "Keep-Alive",
    "host": "header-analyzer.franzai.com",
    "user-agent": "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)",
    "x-forwarded-for": "208.84.101.224",
    "x-forwarded-proto": "https",
    "x-real-ip": "208.84.101.224"
  },
  "cookies": {},
  "query": {},
  "network": {
    "ip": "208.84.101.224",
    "country": "US",
    "city": "Kansas City",
    "asn": 22295
  },
  "geo": {
    "country": "US",
    "city": "Kansas City",
    "asn": 22295,
    "colo": "MCI"
  },
  "bot": {
    "isBot": true,
    "probableBot": false,
    "confidence": 100,
    "suspiciousScore": 100,
    "spoofed": true,
    "uaVerified": false,
    "uaClaim": "Meta-ExternalAgent",
    "botName": "Meta-ExternalAgent",
    "operator": "Private Customer",
    "operatorSource": "cf-as-org",
    "type": "Spoofed Bot",
    "ruleId": "meta-external",
    "detectionReason": "claims to be Meta-ExternalAgent - not verified by Cloudflare",
    "reasons": [
      "claims to be Meta-ExternalAgent - not verified by Cloudflare"
    ],
    "rulesVersion": "d5662f0e0a20"
  },
  "cf": {
    "httpProtocol": "HTTP/1.1",
    "clientAcceptEncoding": "gzip",
    "requestPriority": "",
    "edgeRequestKeepAliveStatus": 1,
    "requestHeaderNames": {},
    "clientTcpRtt": 11,
    "clientQuicRtt": 0,
    "colo": "MCI",
    "asn": 22295,
    "asOrganization": "Private Customer",
    "country": "US",
    "isEUCountry": false,
    "city": "Kansas City",
    "continent": "NA",
    "region": "Missouri",
    "regionCode": "MO",
    "timezone": "America/Chicago",
    "longitude": "-94.57857",
    "latitude": "39.09973",
    "postalCode": "64106",
    "metroCode": "616",
    "tlsVersion": "TLSv1.3",
    "tlsCipher": "AEAD-AES128-GCM-SHA256",
    "tlsClientRandom": "zUR2jDQkDcuwVNLMPbKW9FlOV12kl6yo/13IalaHJqs=",
    "tlsClientCiphersSha1": "cS2l8j12GPBEw+RsoEjwsaNKpx8=",
    "tlsClientExtensionsSha1": "l3/hnilBcqxaD0e8H0fM4mdcRJw=",
    "tlsClientExtensionsSha1Le": "IqMhtDDF0AsOFpLzsL57tTwKmWg=",
    "tlsExportedAuthenticator": {
      "clientHandshake": "76bb21d300ddfaab9b94134a214b3ef66d7b2e310f6ec44d7de692f19efb6ce0",
      "serverHandshake": "8ad9dfd29f1502b8bf82d5b1f7425b6892774a08d0a30087d7f00821ec23c4c8",
      "clientFinished": "47b56d2866e623eb3996af24a0d60825e2698c2194d78547a07d6a305a3ebdf7",
      "serverFinished": "abfa8dfda040d4fcd83d2788a5e26f530ea85085a6a8ea5199adff183716b4ee"
    },
    "tlsClientHelloLength": "260",
    "tlsClientAuth": {
      "certPresented": "0",
      "certVerified": "NONE",
      "certRevoked": "0",
      "certIssuerDN": "",
      "certSubjectDN": "",
      "certIssuerDNRFC2253": "",
      "certSubjectDNRFC2253": "",
      "certIssuerDNLegacy": "",
      "certSubjectDNLegacy": "",
      "certSerial": "",
      "certIssuerSerial": "",
      "certSKI": "",
      "certIssuerSKI": "",
      "certFingerprintSHA1": "",
      "certFingerprintSHA256": "",
      "certNotBefore": "",
      "certNotAfter": "",
      "certRFC9440": "",
      "certRFC9440TooLarge": false,
      "certChainRFC9440": "",
      "certChainRFC9440TooLarge": false
    },
    "verifiedBotCategory": "",
    "edgeL4": {
      "deliveryRate": 54967
    }
  },
  "jsData": null
}