Why am I receiving HTTP requests from this machine?

These HTTP requests are part of an Internet-wide passkey authentication research study being conducted by the Networks and Systems (NetSys) group at the University of Surrey, United Kingdom. This research involves making benign HTTP requests to every domain in the Tranco top sites ranking. By measuring the most popular domains, we study global trends in web security and passkey adoption.

We will never attempt to exploit security problems, guess passwords, or change device configurations. We only receive data that is publicly visible to anyone who visits your website.

We use the Playwright automation framework with a virtual FIDO2 authenticator to detect and analyze passkey (WebAuthn) implementations. No actual authentication credentials are created or used during our scans.