Behaviour
Withheld · single source — count not published for this signal.
2026-11-04 02:03:16 UTC → 2026-11-04 02:03:16 UTC
Loading…
LIB-UNK-F3AEA3 is an inferred behavioral cluster in the Mothlight observatory. Traffic from an HTTP library or script, with no stronger identity claim. This profile describes observed requests and classification evidence, not the intent of every visitor sharing a signature.
No. Confidence measures support for the assigned label (out of 100). AI likelihood estimates evidence for AI involvement (out of 100). Identity verification is reported separately.
LIB-UNK-F3AEA3Evidence strength is a heuristic score out of 100, not a probability. Percentages elsewhere on this page state their denominator in the section text.
Traffic from an HTTP library or script, with no stronger identity claim.
Label: HTTP library (LIB) · Inferred cluster (grouped by shared client signature; not a proven person or organisation).
Verification: Inferred cluster — no vendor identity claim to verify; the label comes from observed behaviour.
Withheld · single source — count not published for this signal.
2026-11-04 02:03:16 UTC → 2026-11-04 02:03:16 UTC
Withheld · single source — count not published for this signal.
2026-11-04 02:03:16 UTC → 2026-11-04 02:03:16 UTC
Withheld · single source — count not published for this signal.
2026-11-04 02:03:16 UTC → 2026-11-04 02:03:16 UTC
Loading 30-day activity…
Robots compliance: Withheld · single source — not measured for publication.
Canary follows: Withheld or below publication threshold — not a zero. Canary follows are counted only when publishable.
Honeytoken uses: Withheld or below publication threshold — not a zero.
Following a canary or using a honeytoken is behavioural evidence; it does not by itself prove AI involvement or intent.
Loading related actors…
Withheld · single source. Paths are not published for single-source actors.
First seen: 2026-11-04 02:03:16 UTC
Last seen: 2026-11-04 02:03:16 UTC
Regions: Not published yet
Countries: Not published yet
Copy this citation:
Mothlight Observatory. "Frosty Butterfly 5" (LIB-UNK-F3AEA3). First seen 2026-11-04, last seen 2026-11-04. https://mothlight.ai/bots/cl-f3aea3 (accessed 2026-11-10). Counts follow the publication rule (at least 3 events from at least 2 distinct sources).
Counts for this actor are withheld because all observed requests came from a single source. Behavioural breakdowns are not published until the actor is seen from at least two distinct sources with at least three events.
Volume band: Fewer than 3 requests. Exact counts, paths, and breakdowns stay unpublished for single-source actors. How the publication rule works
Withheld · single source. Technique, service and CVE breakdowns are not published for single-source actors.