Agent detected — Score 91/100

Agent confirmed

Honeypotted — fake dead-end served · 9 bouncer turns

Session details

Framework unattributed

Strategy honeypot

Turns 9

Detected Tue, 20 Oct 2026 10:21:16 GMT

User-Agent Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)

Signals fired 4 triggered

cross-user-pattern Fingerprint seen across multiple deployments

cloud-provider-asn Traffic originates from cloud infrastructure (AWS/GCP/Azure)

suspicious-accept Accept header pattern inconsistent with browser requests

header-order-anomaly Request headers in alphabetical or non-browser order

Attack path 9 requests

1
                  /.ssh/authorized_keys
                  Auth probe
                

/api/proc/self/environ Request

/key.json Spec discovery

/serverless.yml Request

/@fs/var/task/.env?raw?? Request

6
                  /__vite_rsc_findSourceMapURL?filename=file:///app/.env&environmentName=rsc
                  Data access
                

/.env?raw?? Request

/app Request

/lib/terminal-xhr.php Request

Bouncer transcript

No transcript — strategy did not engage the bouncer.