Agent detected — Score 90/100

Agent confirmed

Honeypotted — fake dead-end served · 11 bouncer turns

Session details

Framework unattributed

Strategy honeypot

Turns 11

Detected Tue, 20 Oct 2026 10:21:16 GMT

User-Agent Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)

Signals fired 4 triggered

cross-user-pattern Fingerprint seen across multiple deployments

cloud-provider-asn Traffic originates from cloud infrastructure (AWS/GCP/Azure)

suspicious-accept Accept header pattern inconsistent with browser requests

header-order-anomaly Request headers in alphabetical or non-browser order

Attack path 11 requests

/.ssh/known_hosts Request

/.docker/secrets.json Spec discovery

/.dockercfg Request

4
                  /uploads../.env
                  Data access
                

/sa.json Spec discovery

6
                  /userfiles/x?path=../../.env
                  Data access
                

/frontend/.env Request

/firebase-adminsdk.json Spec discovery

/backend/.env Request

/.ssh/id_rsa Request

/@fs/proc/self/cmdline?raw?? Request

Bouncer transcript

No transcript — strategy did not engage the bouncer.