← Dashboard / Signature Detail
Overview Activity Visitors Countries Endpoints Sessions Threats Investigate
NL

Indigo 418 iOS

 · Indigo 418 / iOS Bot
Policy: Allow
Probability
100 %
Confidence
98 %
Risk Profile
VeryHigh
Threat
None
Hit Count
50
Last Seen
now

Analysis

Real browser user (verified) - TLS connection appears normal, No header/UA inconsistencies detected

Detection Signals

  • ↑ Heuristic model (late): 70 % bot likelihood (292 features) 1.01
  • ↓ Heuristic model (early): 62 % human likelihood (17 features) 0.48
  • ↓ IP appears normal: 82.174.242.xxx 0.15
  • ↓ Headers appear normal 0.15
  • ↓ Request patterns appear normal 0.15
  • ↓ No header/UA inconsistencies detected 0.15
Network Locale Headers Tool Transport Session Quality
Drift vs
50.3%

Fingerprint Profile

TLS Version
TLSv1.3
HTTP Protocol
HTTP/2
Protocol Client
TLS_AES_256_GCM_SHA384
TCP OS Hint
Unavailable
Fingerprint Integrity
Suspect
UA Consistency
Consistent
Headless Indicator
Low
Datacenter IP
Clean

Browser modes same browser, different modes. One row per persisted mode

Mode Observations Maturity Shift from baseline Last seen
bot-raw 67885 67885 0.00 (ua family, accept encoding ordered, accept language primary) 04:59:51
sub-resource 6 6 0.71 (ua family, priority, header case pattern) 10:11:58
navigation 1 1 0.78 (ua family, upgrade insecure requests, priority) 10:11:54
3 modes across 67892 observations. See composite browser-mode fingerprints.
Endpoints Visited (1) Click to expand · stats unavailable
# Path
1 /dashboard/signature/d9ff72d987bfae17
Raw Requests (50) Click to expand
Time Method Path Status Prob Conf Risk Profile Action Time
03:49:06 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 14.4ms
22:49:05 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 14.3ms
21:22:00 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 13.4ms
20:49:07 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 14.7ms
19:49:06 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 14.9ms
18:49:08 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 15.3ms
14:49:07 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 14.9ms
06:49:10 GET /dashboard/signature/d9ff72d987bfae17 404 82 % 87 % High Silent Throttle 12.1ms
06:49:05 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 14.4ms
00:19:04 GET /dashboard/signature/d9ff72d987bfae17 404 84 % 88 % High Silent Throttle 15.3ms
00:19:00 GET /dashboard/signature/d9ff72d987bfae17 400 48 % 81 % Elevated Allow 15.9ms
09:49:08 GET /dashboard/signature/d9ff72d987bfae17 404 82 % 87 % High Silent Throttle 13.6ms
09:49:04 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 14.1ms
08:49:07 GET /dashboard/signature/d9ff72d987bfae17 404 84 % 88 % High Silent Throttle 12.9ms
08:49:05 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 14.4ms
03:49:06 GET /dashboard/signature/d9ff72d987bfae17 404 84 % 88 % High Silent Throttle 13.1ms
03:49:05 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 14.9ms
16:49:13 GET /dashboard/signature/d9ff72d987bfae17 404 84 % 88 % High Silent Throttle 12.5ms
16:49:09 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 14.3ms
22:19:05 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 14.2ms
01:49:06 GET /dashboard/signature/d9ff72d987bfae17 404 84 % 88 % High Silent Throttle 12.0ms
01:49:03 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 13.3ms
00:49:10 GET /dashboard/signature/d9ff72d987bfae17 404 84 % 88 % High Silent Throttle 12.7ms
00:49:06 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 13.1ms
23:19:08 GET /dashboard/signature/d9ff72d987bfae17 404 90 % 88 % VeryHigh Silent Throttle 13.5ms
23:19:03 GET /dashboard/signature/d9ff72d987bfae17 404 56 % 82 % Medium Allow 14.4ms
22:49:05 GET /dashboard/signature/d9ff72d987bfae17 404 82 % 87 % High Silent Throttle 12.7ms
22:49:02 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 15.3ms
21:49:11 GET /dashboard/signature/d9ff72d987bfae17 404 84 % 88 % High Silent Throttle 13.6ms
21:49:07 GET /dashboard/signature/d9ff72d987bfae17 404 47 % 81 % Elevated Allow 14.5ms
22:49:08 GET /dashboard/signature/d9ff72d987bfae17 404 90 % 88 % VeryHigh Silent Throttle 13.8ms
22:49:04 GET /dashboard/signature/d9ff72d987bfae17 404 51 % 80 % Medium Allow 15.0ms
22:19:08 GET /dashboard/signature/d9ff72d987bfae17 404 84 % 88 % High Silent Throttle 13.2ms
22:19:05 GET /dashboard/signature/d9ff72d987bfae17 400 47 % 81 % Elevated Allow 14.2ms
05:19:06 GET /dashboard/signature/d9ff72d987bfae17 200 82 % 87 % High Silent Throttle 13.3ms
05:19:03 GET /dashboard/signature/d9ff72d987bfae17 200 47 % 81 % Elevated Allow 12.6ms
23:19:08 GET /dashboard/signature/d9ff72d987bfae17 200 82 % 87 % High Silent Throttle 13.4ms
23:19:04 GET /dashboard/signature/d9ff72d987bfae17 200 47 % 81 % Elevated Allow 12.5ms
22:43:55 GET /dashboard/signature/d9ff72d987bfae17 200 82 % 87 % High Silent Throttle 15.3ms
22:43:51 GET /dashboard/signature/d9ff72d987bfae17 200 47 % 81 % Elevated Allow 13.1ms
17:18:00 GET /dashboard/signature/d9ff72d987bfae17 200 82 % 87 % High Silent Throttle 12.8ms
17:17:56 GET /dashboard/signature/d9ff72d987bfae17 200 47 % 81 % Elevated Allow 13.5ms
06:49:04 GET /dashboard/signature/d9ff72d987bfae17 200 82 % 87 % High Silent Throttle 13.0ms
06:49:02 GET /dashboard/signature/d9ff72d987bfae17 200 47 % 81 % Elevated Allow 12.1ms
05:49:05 GET /dashboard/signature/d9ff72d987bfae17 200 70 % 85 % High Silent Throttle 12.3ms
05:49:01 GET /dashboard/signature/d9ff72d987bfae17 200 51 % 80 % Medium Allow 13.7ms
05:19:06 GET /dashboard/signature/d9ff72d987bfae17 200 82 % 87 % High Silent Throttle 15.3ms
05:19:03 GET /dashboard/signature/d9ff72d987bfae17 200 47 % 81 % Elevated Allow 13.8ms
04:19:02 GET /dashboard/signature/d9ff72d987bfae17 200 47 % 81 % Elevated Allow 12.6ms
03:19:02 GET /dashboard/signature/d9ff72d987bfae17 200 47 % 81 % Elevated Allow 13.0ms

Bot Probability & Confidence History

StyloBot Detection Overhead (ms)

User Agent

Indigo/418 CFNetwork/[phone] Darwin/25.5.0

Detector Contributions (34 detectors)

Detector Confidence Delta Timing (ms)
HeuristicLate
Heuristic model (late): 70 % bot likelihood (292 features)
 +0.405 0.4
Heuristic
Heuristic model (early): 62 % human likelihood (17 features)
 -0.240 0.1
Ip
IP appears normal: 82.174.242.xxx
 -0.150 2.0
Header
Headers appear normal
 -0.150 0.1
Behavioral
Request patterns appear normal
 -0.150 0.2
Inconsistency
No header/UA inconsistencies detected
 -0.150 0.0
TlsFingerprint
TLS connection appears normal
 -0.150 0.0
TcpIpFingerprint
Missing connection reuse header (unusual for real browsers)
 +0.200 0.0
UserAgent
No bot marker in User-Agent (weak human lean; UA is easily spoofed)
 -0.050 0.1
VersionAge
Browser/OS versions appear current
 -0.050 0.0
Http2Fingerprint
No HTTP/2 stream priority (browsers typically use this)
 +0.050 0.0
AI
AI analysis: borderline case, monitoring
 +0.000 10.2
Llm
LLM detection disabled or unavailable
 +0.000 0.0
Intent
Session intent: browsing (threat=0.05, band=None)
 +0.000 0.4
AiScraper
No AI scraper signals detected
 +0.000 0.0
Similarity
No prior visitor signatures to compare against yet
 +0.000 0.0
StreamAbuse
Stream abuse check - non-streaming request
 +0.000 0.0
VerifiedBot
No known bot UA pattern
 +0.000 0.0
SecurityTool
No security tools detected in User-Agent
 +0.000 0.1
SessionVector
Session tracking active (1 requests, 0 prior sessions)
 +0.000 0.2
CookieBehavior
Too few requests for cookie analysis
 +0.000 0.0
ReputationBias
No learned reputation patterns matched
 +0.000 0.0
ClaimedIdentity
No profile for UA family 'Indigo'
 +0.000 0.0
ProjectHoneypot
Skipped: ProjectHoneypot is disabled in configuration
 +0.000 0.0
ReactivePattern
No prior error events to analyze
 +0.000 0.0
RequestHydrator
Request signals hydrated to sink
 +0.000 0.0
Http3Fingerprint
Connection uses HTTP/2 (not HTTP/3)
 +0.000 0.0
ResponseBehavior
Response coordinator not configured
 +0.000 0.0
HeaderCorrelation
Single signature per header profile
 +0.000 0.0
ResourceWaterfall
Insufficient document requests for analysis
 +0.000 0.0
TransportProtocol
Transport protocol analysis complete
 +0.000 0.0
BehavioralWaveform
Behavioral waveform analysis complete (insufficient history)
 +0.000 0.2
FastPathReputation
No known patterns in reputation cache
 +0.000 0.0
MultiLayerCorrelation
Cross-signal consistency check complete (not enough data to compare)
 +0.000 0.1

Signal Intelligence

h2

protocol h2

request

protocol HTTP/2
accept_encoding gzip, deflate, br

risk

justification Classified Unknown (probability 0.47, confidence 0.81)
friendly_pin_trace not-applicable:botType=Unknown,yamlType=null,botName=null

tls

cipher TLS_AES_256_GCM_SHA384
Version TLSv1.3
version TLSv1.3

Policy applied

Hit history

No sessions recorded yet.

Sessions are created when a visitor's activity gap exceeds 30 minutes.

Effective policy
Loading effective policy…
ASP.NET Pack — Auth health
JWKS health
OK

reachable

Auth pipeline
JWKS reachable
License
Licensed

ASP.NET pack enabled

OTel Mesh — Traces

Fingerprint timeline

a1a06908784d4fe29cfd7528968f643d 0 observations

Span + log activity for this fingerprint, ordered by timestamp.

No timeline observations

OTel Mesh receiver online, but no observations seen for this fingerprint id (check W3C baggage propagation)

Operator actions

Operator actions

Block/Allow writes a scoped policy rule for this fingerprint — a policy action, applied via the live policy pipe. It is never a skip-detection bypass.

Signature: QhmlYVw4qSzqvQGZoPco6w | Processing: 14ms | Country: NL | UA: Indigo/418 CFNetwork/[phone] Darwin/25.5.0 | First seen: 2026-07-17 03:19:02 UTC