AZ
Back to sessions

unx_0d53cp4

49
User: m•••••••@icloud.com🇮🇹IT152.60.•••.•••AS13335 Cloudflare
Open in graph
Final decision
Review· 49 / 100
Driven primarily by:
  • Session replay detected68
  • First-seen fingerprint42

Fired signals

Each card explains what the signal means and why it fired.

Device
First-seen fingerprint
42
Device fingerprint has never been associated with this user or account before.
Behavior
Session replay detected
68
Interaction timing repeats a previously recorded session with bit-for-bit precision — likely replay attack.

Risk breakdown

Contribution to the final score by category.

  • Device42
  • Behavior68
  • Network0
  • Identity0
  • Malware0

Event timeline

Everything that happened during this session.

  1. Session start3:27:34 PM
    VPN · AS13335 Cloudflare
  2. Linux · Fedora 403:27:36 PM
    fp_000031d
  3. Session replay detected3:27:57 PM
    severity 68
  4. First-seen fingerprint3:28:12 PM
    severity 42
  5. Viewed /account3:28:20 PM
  6. Opened /transfer3:28:35 PM
  7. Transfer attempt3:28:43 PM
    $3,756
  8. Sent to manual review3:29:13 PM