You: Bot 100.0% Low
← Dashboard / Signature Detail
NL

Chrome 130 Windows

 · Chrome 130.0.0 / Windows Bot
Unknown
Policy: Silent Throttle
Probability
83 %
Confidence
94 %
Risk Profile
VeryHigh
Threat
None
Hit Count
16
Last Seen
now

Analysis

Chrome 130 Windows on /dashboard - caught by Timing anomaly: 0.0s vs 2.5±0.7s (z=3.7), Request patterns appear normal, IP appears normal: 212.34.135.xxx

Detection Signals

  • ↑ Heuristic model (late): 79 % bot likelihood (299 features) 1.44
  • ↓ IP appears normal: 212.34.135.xxx 0.15
  • ↓ TLS connection appears normal 0.15
  • ↑ Request patterns appear normal; Timing anomaly: 0.0s vs 2.5±0.7s (z=3.7) 0.13
  • ↑ Client closes connection after each request (bots often avoid persistent connections) 0.06
  • ↓ No bot marker in User-Agent (weak human lean; UA is easily spoofed) 0.05
Network Locale Headers Tool Transport Session Quality
Closest to
Chrome Desktop
Drift vs
32.1%

Fingerprint Profile

TLS Version
TLSv1.2
HTTP Protocol
HTTP/1.0
Protocol Client
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Consistent
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 5513 5513 0.13 (priority, header order hash, sec ch ua platform) 09:45:43
signalr-negotiate 499 499 0.20 (header order hash, header case pattern, accept encoding ordered) 09:11:21
navigation 1602 1602 0.38 (sec ch ua brands ordered, accept, priority) 03:48:08
sub-resource 530 530 0.30 (priority, header order hash, accept) 14:43:58
4 modes across 8144 observations. See composite browser-mode fingerprints.
Endpoints Visited (6) Click to expand · stats unavailable
# Path
1 /dashboard
2 /contact
3 /register
4 /account/register
5 /dashboard/traffic
6 /getting-started
Raw Requests (16) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
19:14:56 GET /dashboard 302 78 % 68 % High Silent Throttle 12.7ms
19:14:53 GET /contact 200 78 % 68 % High Silent Throttle 11.3ms
19:14:51 GET /register 404 86 % 68 % VeryHigh Silent Throttle 11.9ms
19:14:48 GET /account/register 404 86 % 68 % VeryHigh Silent Throttle 11.8ms
19:14:46 GET /register 404 78 % 68 % High Silent Throttle 11.7ms
19:14:44 GET /account/register 404 78 % 68 % High Silent Throttle 12.2ms
19:14:42 GET /dashboard/traffic 200 78 % 68 % High Silent Throttle 10.7ms
19:14:40 GET /dashboard 302 90 % 88 % VeryHigh Silent Throttle 12.7ms
19:14:38 GET /contact 200 90 % 88 % VeryHigh Silent Throttle 12.2ms
19:14:35 GET /register 404 90 % 88 % VeryHigh Silent Throttle 15.0ms
19:14:33 GET /account/register 404 90 % 88 % VeryHigh Silent Throttle 12.7ms
19:14:29 GET /register 404 90 % 88 % VeryHigh Silent Throttle 13.0ms
19:14:27 GET /account/register 404 90 % 88 % VeryHigh Silent Throttle 12.9ms
19:14:24 GET /dashboard/traffic 200 90 % 88 % VeryHigh Silent Throttle 13.0ms
19:14:21 GET /dashboard 302 90 % 88 % VeryHigh Silent Throttle 12.6ms
19:14:18 GET /getting-started 200 90 % 88 % VeryHigh Silent Throttle 19.0ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36

Detector Contributions (19 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 79 % bot likelihood (299 features)
 +0.576 0.4
Ip
IP appears normal: 212.34.135.xxx
 -0.150 0.0
TlsFingerprint
TLS connection appears normal
 -0.150 0.0
Behavioral
Request patterns appear normal; Timing anomaly: 0.0s vs 2.5±0.7s (z=3.7)
 +0.100 0.4
TcpIpFingerprint
Client closes connection after each request (bots often avoid persistent connections)
 +0.100 0.1
UserAgent
No bot marker in User-Agent (weak human lean; UA is easily spoofed)
 -0.050 1.0
Http2Fingerprint
Using HTTP/1.0 instead of HTTP/2 (HTTP/2 rate: 92 % over 203 samples)
 +0.092 0.0
Heuristic
Heuristic model (early): 51 % human likelihood (21 features)
 -0.021 0.1
AI
AI analysis: borderline case, monitoring
 +0.000 10.3
Header
Browser UA without Accept-Language; deployment norm is low language rate (57 % over 122 samples)
 +0.000 0.1
AiScraper
No AI scraper signals detected
 +0.000 0.1
VerifiedBot
No known bot UA pattern
 +0.000 0.0
SecurityTool
No security tools detected in User-Agent
 +0.000 0.1
ContentSequence
Document hit; sequence reset at /dashboard
 +0.000 0.1
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http3Fingerprint
Connection uses HTTP/1.0 (not HTTP/3)
 +0.000 0.0
HeaderCorrelation
Single signature per header profile
 +0.000 0.0
TransportProtocol
Transport protocol analysis complete
 +0.000 0.0
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0

Signal Intelligence

referrer

domain eeoo.app

request

protocol HTTP/1.0

risk

justification Classified Unknown (probability 0.78, confidence 0.68)
friendly_pin_trace not-applicable:botType=Unknown,yamlType=null,botName=null

tls

cipher TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
Version TLSv1.2
version TLSv1.2

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth health
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

91e6038ebacb4268a4bab17554356661 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Operator actions

Operator actions

Block/Allow writes a scoped policy rule for this fingerprint — a policy action, applied via the live policy pipe. It is never a skip-detection bypass.

Signature: GgeFzgEEyDtg6Iw3nud8Uw | Processing: 13ms | Country: NL | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 | First seen: 2026-07-25 19:14:18 UTC

Apply Bot Policy

GET /path 

            

            

            

                
                    FOSS: restart required after config changes