Transport 311
alpnnot scorableuser agent does not name a browser
alpn_h2_offered inconclusive log-odds 1.00
user agent does not name a browser
alpn_absent inconclusive log-odds 1.00
user agent does not name a browser
KB 2026.11.3
tls_greasenot scorableuser agent does not name a browser
grease_presence inconclusive impossibility
user agent does not name a browser
grease_presence_soft inconclusive log-odds 1.00
user agent does not name a browser
grease_position inconclusive log-odds 1.00
user agent does not name a browser
KB 2026.11.3
tls_pqnot scorableuser agent does not name a browser
pq_key_share inconclusive impossibility
user agent does not name a browser
pq_key_share_soft inconclusive log-odds 1.00
user agent does not name a browser
KB 2026.11.3
tls_extensionsnot scorableuser agent does not name a browser
engine_extensions inconclusive impossibility
user agent does not name a browser
KB 2026.11.3
tls_hello_sizenot scorableuser agent does not name a browser
hello_size inconclusive log-odds 1.00
user agent does not name a browser
KB 2026.11.3
tls_resumption1 check passed
tls_resumption pass recorded only (weight 0)
| observed | expected | source |
|---|---|---|
| resumed=false psk_identities=0 session_ticket_len=0 psk_modes=[1] | recorded, not scored | tls.resumed |
KB 2026.11.3
h2_illegalall 2 checks passed
h2_illegal_headers pass impossibility
| observed | expected | source |
|---|---|---|
| 3 headers, all lower-case, no connection-specific fields | RFC 9113 section 8.2 field rules | request.headers |
h2_illegal_headers_soft pass log-odds 1.00
| observed | expected | source |
|---|---|---|
| 3 headers, all lower-case, no connection-specific fields | RFC 9113 section 8.2 field rules | request.headers |
KB 2026.11.3
h2_prioritynot scorableuser agent does not name a browser
h2_priority inconclusive impossibility
user agent does not name a browser
h2_priority_soft inconclusive log-odds 1.00
user agent does not name a browser
KB 2026.11.3
authorityall 2 checks passed
authority_sni pass impossibility
| observed | expected | source |
|---|---|---|
| authority=dangermouse.app sni=dangermouse.app | SNI equal to the request host | tls.client_hello.sni |
authority_sni_soft pass log-odds 1.00
| observed | expected | source |
|---|---|---|
| authority=dangermouse.app sni=dangermouse.app | SNI equal to the request host | tls.client_hello.sni |
KB 2026.11.3
h1_versionnot scorablehttp/1.1 not used (h2 connection)
h1_version inconclusive log-odds 1.00
http/1.1 not used (h2 connection)
KB 2026.11.3
te_trailersnot scorableuser agent does not name a browser
te_trailers inconclusive impossibility
user agent does not name a browser
te_trailers_soft inconclusive log-odds 1.00
user agent does not name a browser
KB 2026.11.3
connection_reusenot scorableno asset or beacon arrivals
asset_connection_reuse inconclusive recorded only (weight 0)
no asset or beacon arrivals
KB 2026.11.3
library_fingerprintnot scorableunknown user agent on other: TLS stack unknown (WebKit outside iOS/macOS); unknown user agent on other: HTTP/2 stack unknown (WebKit outside iOS/macOS)
library_ja4 inconclusive impossibility
unknown user agent on other: TLS stack unknown (WebKit outside iOS/macOS)
library_h2 inconclusive impossibility
unknown user agent on other: HTTP/2 stack unknown (WebKit outside iOS/macOS)
KB 2026.11.3
impersonation_profilenot scorableuser agent does not name a browser
impersonation_profile inconclusive impossibility
user agent does not name a browser
impersonation_lag inconclusive impossibility
user agent does not name a browser
KB 2026.11.3
HTTP 67
document_request1 check passed
capture_present pass impossibility
| observed | expected | source |
|---|---|---|
| GET /sitemap.xml | a document request | request.method, request.path |
KB 2026.11.3
prefetch_preview1 check passed
prefetch_preview pass log-odds 1.00
| observed | expected | source |
|---|---|---|
| none | absent on a user navigation | request.headers[sec-purpose|purpose|x-purpose|x-moz] |
KB 2026.11.3
proxy_leakall 2 checks passed
proxy_leak_headers pass log-odds 1.00
| observed | expected | source |
|---|---|---|
| none | absent from a browser request | request.headers[via|x-forwarded-for|forwarded|proxy-connection|x-real-ip|max-forwards|early-data] |
proxy_leak_client_ip pass impossibility
| observed | expected | source |
|---|---|---|
| none | no client address in proxy headers | request.headers[x-forwarded-for|x-real-ip|forwarded] |
KB 2026.11.3
privacy_signals1 check passed
privacy_signals pass log-odds 1.00
| observed | expected | source |
|---|---|---|
| none | optional | request.headers[sec-gpc|dnt|save-data] |
KB 2026.11.3
header_setnot scorableuser agent does not name a browser
header_set inconclusive impossibility
user agent does not name a browser
header_set_soft inconclusive log-odds 1.00
user agent does not name a browser
KB 2026.11.3
header_shapeall 3 checks passednote: name order as sentnote: other duplicated names are recorded, not scored
header_shape pass recorded only (weight 0)
| observed | expected | source |
|---|---|---|
| 3 headers, lower-case names | recorded | request.header_count, request.casing |
| accept,user-agent,accept-encoding | recorded (KB order profiles are P14) | request.headers |
| note: name order as sent | ||
| none | recorded | request.duplicate_names |
| none | recorded | request.cookie_order |
header_duplicates pass impossibility
| observed | expected | source |
|---|---|---|
| none | none among user-agent, accept, host, cookie | request.duplicate_names |
| note: other duplicated names are recorded, not scored | ||
header_duplicates_soft pass log-odds 1.00
| observed | expected | source |
|---|---|---|
| none | none among user-agent, accept, host, cookie | request.duplicate_names |
| note: other duplicated names are recorded, not scored | ||
KB 2026.11.3
accept_encodingnot scorableuser agent does not name a browser
accept_encoding inconclusive impossibility
user agent does not name a browser
accept_encoding_soft inconclusive log-odds 1.00
user agent does not name a browser
KB 2026.11.3
accept_languagenot scorableuser agent does not name a browser
accept_language inconclusive log-odds 1.00
user agent does not name a browser
KB 2026.11.3
accept_destnot scorableuser agent does not name a browser
accept_dest inconclusive impossibility
user agent does not name a browser
accept_dest_soft inconclusive log-odds 1.00
user agent does not name a browser
KB 2026.11.3
critical_chscored once the beacon arrivesuser agent does not name a browser
critical_ch inconclusive impossibility
user agent does not name a browser
critical_ch_soft inconclusive log-odds 1.00
user agent does not name a browser
KB 2026.11.3
high_entropy_hintsnot scorableuser agent does not name a browser
high_entropy_hints inconclusive impossibility
user agent does not name a browser
high_entropy_hints_soft inconclusive log-odds 1.00
user agent does not name a browser
KB 2026.11.3
low_entropy_extras1 check passed
low_entropy_extras pass log-odds 1.00
| observed | expected | source |
|---|---|---|
| none | device hints only when requested | request.headers |
KB 2026.11.3
brand_ordernot scorableuser agent does not name a browser
brand_order inconclusive log-odds 1.00
user agent does not name a browser
KB 2026.11.3
User agent and device 210
browser_calendarnot scorabledeclared crawler UA (ClaudeBot): release calendar not scored
browser_calendar inconclusive impossibility
declared crawler UA (ClaudeBot): release calendar not scored
browser_calendar_soft inconclusive log-odds 1.00
declared crawler UA (ClaudeBot): release calendar not scored
KB 2026.11.3
chrome_full_versionnot scorableno sec-ch-ua-full-version-list header
chrome_full_version inconclusive impossibility
no sec-ch-ua-full-version-list header
chrome_full_version_soft inconclusive log-odds 1.00
no sec-ch-ua-full-version-list header
KB 2026.11.3
os_calendarnot scorabledeclared crawler UA (ClaudeBot): release calendar not scored; no CFNetwork/Darwin token in the User-Agent
os_calendar inconclusive impossibility
declared crawler UA (ClaudeBot): release calendar not scored
os_calendar_soft inconclusive log-odds 1.00
declared crawler UA (ClaudeBot): release calendar not scored
darwin_calendar inconclusive impossibility
no CFNetwork/Darwin token in the User-Agent
darwin_calendar_soft inconclusive log-odds 1.00
no CFNetwork/Darwin token in the User-Agent
KB 2026.11.3
browser_min_osnot scorabledeclared crawler UA (ClaudeBot): device claims not scored
browser_min_os inconclusive impossibility
declared crawler UA (ClaudeBot): device claims not scored
KB 2026.11.3
android_modelnot scorabledeclared crawler UA (ClaudeBot): device claims not scored
android_model inconclusive recorded only (weight 0)
declared crawler UA (ClaudeBot): device claims not scored
KB 2026.11.3
model_os_rangenot scorabledeclared crawler UA (ClaudeBot): device claims not scored
model_os_range inconclusive impossibility
declared crawler UA (ClaudeBot): device claims not scored
model_os_range_soft inconclusive log-odds 1.00
declared crawler UA (ClaudeBot): device claims not scored
KB 2026.11.3
samsung_firmwarenot scorabledeclared crawler UA (ClaudeBot): device claims not scored
samsung_firmware inconclusive impossibility
declared crawler UA (ClaudeBot): device claims not scored
samsung_firmware_soft inconclusive log-odds 1.00
declared crawler UA (ClaudeBot): device claims not scored
samsung_variant_market inconclusive log-odds 1.00
declared crawler UA (ClaudeBot): device claims not scored
KB 2026.11.3
automation_descriptorall 2 checks passed
automation_descriptor pass impossibility
| observed | expected | source |
|---|---|---|
| Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) | a user agent not copied from an automation device descriptor | request.headers[user-agent] |
automation_descriptor_soft pass log-odds 1.00
| observed | expected | source |
|---|---|---|
| Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) | a user agent not copied from an automation device descriptor | request.headers[user-agent] |
KB 2026.11.3
ua_grammarnot scorabledeclared crawler UA, verified by IP in P16
reduced_ua inconclusive impossibility
declared crawler UA, verified by IP in P16
reduced_ua_soft inconclusive log-odds 1.00
declared crawler UA, verified by IP in P16
KB 2026.11.3
browser_os_couplingnot scorableuser agent does not name a browser
browser_os_coupling inconclusive impossibility
user agent does not name a browser
KB 2026.11.3
client_hintsnot scorabledeclared crawler UA, verified by IP in P16; no client-hint headers to compare
client_hints_presence inconclusive impossibility
declared crawler UA, verified by IP in P16
client_hints_presence_soft inconclusive log-odds 1.00
declared crawler UA, verified by IP in P16
client_hints_agree inconclusive impossibility
no client-hint headers to compare
KB 2026.11.3
webviewall 2 checks passednote: unknown
webview_markers pass impossibility
| observed | expected | source |
|---|---|---|
| none | none (not a WebView) | request.headers[user-agent], request.headers[x-requested-with], request.headers[referer] |
| note: unknown | ||
webview_markers_soft pass log-odds 1.00
| observed | expected | source |
|---|---|---|
| none | none (not a WebView) | request.headers[user-agent], request.headers[x-requested-with], request.headers[referer] |
| note: unknown | ||
KB 2026.11.3
Client-side 125
Waiting for the beacon: this section is scored from what the page script measures and updates in place once it arrives. Without JavaScript it stays gray ("no beacon received").
beacon_joinscored once the beacon arrivesno beacon received
beacon_join inconclusive impossibility
no beacon received
beacon_join_soft inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
js_hintsscored once the beacon arrivesno beacon received
js_hints inconclusive log-odds 2.00
no beacon received
KB 2026.11.3
automation_markersscored once the beacon arrivesno beacon received
automation_markers inconclusive impossibility
no beacon received
KB 2026.11.3
native_gettersscored once the beacon arrivesno beacon received
native_getters inconclusive impossibility
no beacon received
KB 2026.11.3
worker_agreementscored once the beacon arrivesno beacon received
worker_agreement inconclusive impossibility
no beacon received
KB 2026.11.3
js_enginescored once the beacon arrivesno beacon received
js_engine inconclusive impossibility
no beacon received
KB 2026.11.3
feature_versionscored once the beacon arrivesno beacon received
feature_version inconclusive log-odds 2.00
no beacon received
KB 2026.11.3
screen_geometryscored once the beacon arrivesno beacon received
screen_geometry inconclusive log-odds 2.00
no beacon received
screen_geometry_soft inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
automation_viewportscored once the beacon arrivesno beacon received
automation_viewport inconclusive impossibility
no beacon received
KB 2026.11.3
screen_modelscored once the beacon arrivesno beacon received
screen_model inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
touch_form_factorscored once the beacon arrivesno beacon received
touch_form_factor inconclusive log-odds 2.00
no beacon received
KB 2026.11.3
languages_headerscored once the beacon arrivesno beacon received
languages_header inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
tz_offsetscored once the beacon arrivesno beacon received
tz_offset inconclusive log-odds 2.00
no beacon received
KB 2026.11.3
clock_skewscored once the beacon arrivesno beacon received
clock_skew inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
software_rendererscored once the beacon arrivesno beacon received
software_renderer inconclusive log-odds 3.00
no beacon received
software_renderer_soft inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
gpu_modelscored once the beacon arrivesno beacon received
gpu_model inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
fonts_osscored once the beacon arrivesno beacon received
fonts_os inconclusive log-odds 3.00
no beacon received
fonts_os_soft inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
voices_osscored once the beacon arrivesno beacon received
voices_os inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
drmscored once the beacon arrivesno beacon received
drm_fairplay inconclusive impossibility
no beacon received
drm_clearkey inconclusive log-odds 3.00
no beacon received
drm_soft inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
hardware_modelscored once the beacon arrivesno beacon received
hardware_model inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
webrtc_ipscored once the beacon arrivesno beacon received
webrtc_ip inconclusive log-odds 3.00
no beacon received
webrtc_ip_soft inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
asset_timingscored once the beacon arrivesno beacon received
asset_timing inconclusive log-odds 3.00
no beacon received
KB 2026.11.3
page_visibilityscored once the beacon arrivesno beacon received
prerender inconclusive log-odds 1.00
no beacon received
hidden_at_load inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
input_cadencescored once the beacon arrivesno beacon received
input_cadence inconclusive log-odds 3.00
no beacon received
input_cadence_soft inconclusive log-odds 1.00
no beacon received
KB 2026.11.3
honeypot1 check passed
honeypot pass log-odds 1.00
| observed | expected | source |
|---|---|---|
| trap link not requested | not requested | honeypot.followed |
KB 2026.11.3
load_behaviourscored once the beacon arrivesno asset requests and no beacon yet: load behaviour not yet observable
load_behaviour inconclusive impossibility
no asset requests and no beacon yet: load behaviour not yet observable
load_behaviour_soft inconclusive log-odds 1.00
no asset requests and no beacon yet: load behaviour not yet observable
KB 2026.11.3
Network 45
proxy_gap1 check passednote: a ratio well above the population's suggests a proxy or tunnel between TCP peer and TLS client
proxy_gap pass recorded only (weight 0)
| observed | expected | source |
|---|---|---|
| 0.49 (handshake 32.97ms / rtt 66.72ms) | recorded; near 1 for a client terminating TLS on the measured path | tls.handshake_ms, tcp.rtt_ms |
| note: a ratio well above the population's suggests a proxy or tunnel between TCP peer and TLS client | ||
KB 2026.11.3
mss1 check passed
mss pass recorded only (weight 0)
| observed | expected | source |
|---|---|---|
| snd_mss 1448, advmss 1448 | recorded; 1460 on wired Ethernet, 1350-1440 behind carriers and tunnels | tcp.snd_mss, tcp.advmss |
KB 2026.11.3
verified_non_human1 check passedclass verified-non-human: ClaudeBotnote: UA declares ClaudeBot (ClaudeBot); the IP is in a range published for it
verified_non_human pass impossibility class verified-non-human: ClaudeBot
| observed | expected | source |
|---|---|---|
| crawler ipverse-crawlers (ClaudeBot) 216.73.216.0/22 | an address in ClaudeBot's published ranges | enrichment.range |
| note: UA declares ClaudeBot (ClaudeBot); the IP is in a range published for it | ||
KB 2026.11.3
ip_type1 of 2 checks passed, 1 inconclusivenote: UA declares ClaudeBot (ClaudeBot); the IP is in a range published for it
ip_type pass impossibility
| observed | expected | source |
|---|---|---|
| crawler ipverse-crawlers (ClaudeBot) 216.73.216.0/22 | an address that agrees with the declared identity | enrichment.range |
| note: UA declares ClaudeBot (ClaudeBot); the IP is in a range published for it | ||
ip_type_soft inconclusive log-odds 1.00
verified non-human: not scored
KB 2026.11.3
anonymizernot scorableverified non-human: not scored
anonymizer inconclusive impossibility
verified non-human: not scored
anonymizer_soft inconclusive log-odds 1.00
verified non-human: not scored
KB 2026.11.3
locale_countrynot scorableverified non-human: not scored
locale_country inconclusive log-odds 1.00
verified non-human: not scored
KB 2026.11.3
carriernot scorableASN is not a known mobile carrier; not a mobile carrier address
carrier_asn inconclusive recorded only (weight 0)
ASN is not a known mobile carrier
mss_carrier inconclusive log-odds 1.00
not a mobile carrier address
KB 2026.11.3
rdns_patternnot scorablereverse DNS arrives after grading (served stage)
rdns_pattern inconclusive log-odds 1.00
reverse DNS arrives after grading (served stage)
KB 2026.11.3
timezone_countrynot scorableno client time zone reported (beacon time_zone, P17)
timezone_country inconclusive log-odds 1.00
no client time zone reported (beacon time_zone, P17)
KB 2026.11.3
Population 14
device_churn_on_ipnot scorablenot enough traffic: no earlier visit from this address
device_churn_on_ip inconclusive log-odds 2.00
not enough traffic: no earlier visit from this address
device_churn_on_ip_soft inconclusive log-odds 1.00
not enough traffic: no earlier visit from this address
KB 2026.11.3
device_churn_on_prefixnot scorablenot enough traffic: no earlier visit from this /24
device_churn_on_prefix inconclusive log-odds 2.00
not enough traffic: no earlier visit from this /24
device_churn_on_prefix_soft inconclusive log-odds 1.00
not enough traffic: no earlier visit from this /24
KB 2026.11.3
fingerprint_spreadnot scorablenot enough traffic: no full device fingerprint (no beacon)
fingerprint_spread inconclusive log-odds 2.00
not enough traffic: no full device fingerprint (no beacon)
fingerprint_spread_soft inconclusive log-odds 1.00
not enough traffic: no full device fingerprint (no beacon)
KB 2026.11.3
impossible_travelnot scorablenot enough traffic: no earlier visit with this device fingerprint or cookie
impossible_travel inconclusive log-odds 2.00
not enough traffic: no earlier visit with this device fingerprint or cookie
impossible_travel_soft inconclusive log-odds 1.00
not enough traffic: no earlier visit with this device fingerprint or cookie
KB 2026.11.3
burst_and_vanishnot scorablenot enough traffic: no earlier visit from this address
burst_and_vanish inconclusive log-odds 2.00
not enough traffic: no earlier visit from this address
burst_and_vanish_soft inconclusive log-odds 1.00
not enough traffic: no earlier visit from this address
KB 2026.11.3
return_ratenot scorablenot enough traffic: the visit has no tag
return_rate inconclusive log-odds 2.00
not enough traffic: the visit has no tag
return_rate_soft inconclusive log-odds 1.00
not enough traffic: the visit has no tag
KB 2026.11.3
ua_reusenot scorablenot enough traffic: the visit has no tag
ua_reuse inconclusive log-odds 2.00
not enough traffic: the visit has no tag
ua_reuse_soft inconclusive log-odds 1.00
not enough traffic: the visit has no tag
KB 2026.11.3
unknown_model_ratenot scorablenot enough traffic: the visit has no tag
unknown_model_rate inconclusive log-odds 2.00
not enough traffic: the visit has no tag
unknown_model_rate_soft inconclusive log-odds 1.00
not enough traffic: the visit has no tag
KB 2026.11.3
model_os_independencenot scorablenot enough traffic: the visit has no tag
model_os_independence inconclusive log-odds 2.00
not enough traffic: the visit has no tag
model_os_independence_soft inconclusive log-odds 1.00
not enough traffic: the visit has no tag
KB 2026.11.3
diurnalnot scorablenot enough traffic: the visit has no tag
diurnal inconclusive log-odds 2.00
not enough traffic: the visit has no tag
diurnal_soft inconclusive log-odds 1.00
not enough traffic: the visit has no tag
KB 2026.11.3
fleet_shiftnot scorablenot enough traffic: the visit has no tag
fleet_shift inconclusive log-odds 2.00
not enough traffic: the visit has no tag
fleet_shift_soft inconclusive log-odds 1.00
not enough traffic: the visit has no tag
KB 2026.11.3
uniformitynot scorablenot enough traffic: the visit has no tag
uniformity inconclusive log-odds 2.00
not enough traffic: the visit has no tag
uniformity_soft inconclusive log-odds 1.00
not enough traffic: the visit has no tag
KB 2026.11.3
Echoed parameters
No query parameters on the request.
Tag (none); subdomain label (none).
Visit
| visit ID | 01m6cqh63v72j71f3yek1v54g3 |
|---|---|
| timestamp | 2026-11-01 23:36:19.835 UTC |
| graded | 2026-11-01 23:36:19.839 UTC |
| connection ID | 2a1e87371d4dbe06 |
| request | GET dangermouse.app/sitemap.xml |
| address | 216.73.217.10 AS16509 (enterprise) |
| fingerprint (server) | 0a5841a9affec7f5375832b5010a13581eb489068b05bb30d6d967b1e1932f2f |
| fingerprint (full) | (none: needs the beacon) |
| layers with data | tls, tcp, h2, request, enrichment, population |
| KB version | 2026.11.3 |
| software version | 647e249 |
This report as JSON: /_/report/01m6cqh63v72j71f3yek1v54g3 (add ?raw=0 to drop the raw block). It stays fetchable for the retention window.