DETECTION ARCHITECTURE • 110+ SIGNALS

Why BotRefund is 99% accurate at detecting bots.

One signal can be misleading. BotRefund’s prediction AI evaluates how 110+ browser, network, hardware, and behavioral signals fit together before determining whether a click is human or automated.

Add Free Bot Protection → Explore Detection Signals ↓
MULTI-FACTOR CORROBORATION

Signals become a verdict only when evaluated together

Rather than trusting single-property thresholds that trigger false positives, our edge prediction engine weighs full patterns across network paths, hardware constraints, and cursor telemetry to achieve 99% precision.

SIGNAL FAMILY

Network, VPN, & Geolocation Evading Vectors

01
WebRTC Network LeakChecks whether browser network paths reveal conflicting locations.
02
DNS Tunnel LeakChecks whether DNS and web traffic follow the same route.
03
DNS Challenge BlockedChecks whether DNS and web traffic follow the same route.
04
Timezone EvasionChecks whether location and language settings agree.
05
Latency MismatchChecks whether connection and browser request details stay consistent.
06
Suspicious PortsChecks whether the visitor’s network identity is coherent.
07
UTC Timezone BiasChecks whether location and language settings agree.
08
Languages MismatchChecks whether location and language settings agree.
09
Netprobe Telemetry MissingChecks whether the visitor’s network identity is coherent.
10
IP Address InconsistencyChecks whether the visitor’s network identity is coherent.
11
OS / TCP TTL MismatchChecks whether the visitor’s network identity is coherent.
12
HTTP User-Agent MismatchChecks whether connection and browser request details stay consistent.
13
Accept-Language MismatchChecks whether location and language settings agree.
14
HTTP Protocol MismatchChecks whether connection and browser request details stay consistent.
15
DNS Routing MismatchChecks whether DNS and web traffic follow the same route.
SIGNAL FAMILY

Evasion, Debugger, & Anti-Stealth Traps

16
CDP Debugger LeakChecks for traces left by browser automation or masking tools.
17
Native PatchingChecks whether the browser profile behaves like a real device.
18
Engine MismatchChecks whether the browser profile behaves like a real device.
19
Rebrowser LeaksChecks for traces left by browser automation or masking tools.
20
JS Engine MismatchChecks whether the browser profile behaves like a real device.
21
Automation PropertiesChecks for traces left by browser automation or masking tools.
22
Permission LieChecks whether the browser profile behaves like a real device.
23
toString Patch ShadowChecks whether the browser profile behaves like a real device.
24
Clean Context IframeChecks whether reported device hardware matches execution behavior.
25
CSS Color LeakChecks whether rendering and device fingerprints fit together.
26
Console Debug EvaluatorChecks whether the browser profile behaves like a real device.
27
Playwright BindingsChecks for traces left by browser automation or masking tools.
28
Webdriver TamperingChecks for traces left by browser automation or masking tools.
29
CDP Stack Trace TrapChecks for traces left by browser automation or masking tools.
30
Canvas PoisoningChecks whether rendering and device fingerprints fit together.
31
Iframe Webdriver LeakChecks for traces left by browser automation or masking tools.
32
Permissions Proxy LieChecks whether the browser profile behaves like a real device.
33
Hex-Edited CDP LeakChecks for traces left by browser automation or masking tools.
34
Plugin SpoofingChecks whether the browser profile behaves like a real device.
35
toString InterrogationChecks whether the browser profile behaves like a real device.
36
Webdriver DescriptorChecks for traces left by browser automation or masking tools.
37
Prototype Canary LieChecks whether the browser profile behaves like a real device.
38
Playwright Init ScriptsChecks for traces left by browser automation or masking tools.
39
Chrome for TestingChecks whether the browser profile behaves like a real device.
40
ExposeFunction LeakChecks whether the browser profile behaves like a real device.
41
CDP Runtime.enable LeakChecks for traces left by browser automation or masking tools.
42
Default ViewportChecks whether the browser profile behaves like a real device.
43
CSP BypassChecks whether the browser profile behaves like a real device.
44
Main World ExecutionChecks whether the browser profile behaves like a real device.
SIGNAL FAMILY

Hardware & GPU Fingerprinting

45
CPU Arch MismatchChecks whether reported device hardware matches execution behavior.
46
RAM Limit ClusterChecks whether reported device hardware matches execution behavior.
47
CPU Micro-ArchitectureChecks whether reported device hardware matches execution behavior.
48
Blank GPU CanvasChecks whether rendering and device fingerprints fit together.
49
Font OS MismatchChecks whether rendering and device fingerprints fit together.
50
WebGL Shader NoiseChecks whether rendering and device fingerprints fit together.
51
GPU Hardware MismatchChecks whether rendering and device fingerprints fit together.
52
Keyboard Layout LeakChecks whether reported device hardware matches execution behavior.
53
Empty Device ListChecks whether the device profile is internally consistent.
54
Audio Latency DriftChecks whether connection and browser request details stay consistent.
55
Empty Font CanvasChecks whether rendering and device fingerprints fit together.
56
CPU Concurrency LieChecks whether reported device hardware matches execution behavior.
57
Audio Channel MismatchChecks whether rendering and device fingerprints fit together.
58
Audio Sample RateChecks whether rendering and device fingerprints fit together.
59
WebGL Texture ConstraintChecks whether rendering and device fingerprints fit together.
60
WebGL Extension LieChecks whether rendering and device fingerprints fit together.
SIGNAL FAMILY

Biometric & Behavioral Interactions

61
Robotic Mouse PathChecks for natural human movement, timing, and reading behavior.
62
Robotic Mouse VelocityChecks for natural human movement, timing, and reading behavior.
63
Battery Static ProfileChecks for behavior that resembles a real visitor.
64
Flat Gyroscope ProfileChecks for natural mobile use and real browsing behavior.
65
Static Touch PressureChecks for natural mobile use and real browsing behavior.
66
Grid Snapping / JumpChecks for behavior that resembles a real visitor.
67
Mouse Polling BypassChecks for natural human movement, timing, and reading behavior.
68
Scrollbar Width LeakChecks for natural human movement, timing, and reading behavior.
69
Monitor Sync AnomalyChecks for behavior that resembles a real visitor.
70
WebWorker Platform LeakChecks for natural human movement, timing, and reading behavior.
71
window.open TamperChecks for behavior that resembles a real visitor.
72
Link Blank DeletionChecks for behavior that resembles a real visitor.
73
Tab Focus BypassChecks for natural mobile use and real browsing behavior.
74
Impossible Tab SpeedChecks for natural mobile use and real browsing behavior.
75
Blocked Challenge IframeChecks whether reported device hardware matches execution behavior.
76
Popup Blocker BypassChecks for behavior that resembles a real visitor.
77
Perfect Frame LockChecks whether reported device hardware matches execution behavior.
78
Macro Form FillerChecks for natural human movement, timing, and reading behavior.
79
Fast Reading ScraperChecks for natural human movement, timing, and reading behavior.
80
Constant Scroll SpeedChecks for natural human movement, timing, and reading behavior.
81
Rapid Tab BlursChecks for natural mobile use and real browsing behavior.
82
Mobile Menu ProbeChecks for natural mobile use and real browsing behavior.
83
Throttled CPU AnomalyChecks whether reported device hardware matches execution behavior.
84
Synthetic Audio ClockChecks whether rendering and device fingerprints fit together.
85
Price Scraper SignatureChecks for behavior that resembles a real visitor.
SIGNAL FAMILY

FlareSolverr Specific Diagnostics

86
FlareSolverr PatchChecks for traces left by automated scraping toolkits.
87
FlareSolverr URIChecks for traces left by automated scraping toolkits.
88
Keyboard CAPTCHA ClickChecks whether reported device hardware matches execution behavior.
89
Asset StarvationChecks whether the browser profile behaves like a real device.
90
Headless UA EvaderChecks whether the browser profile behaves like a real device.
SIGNAL FAMILY

Lazy Bot Developer Vectors

91
Navigation Timing StubChecks whether the browser profile behaves like a real device.
92
Color Depth MismatchChecks whether rendering and device fingerprints fit together.
93
Chrome API StubChecks whether the browser profile behaves like a real device.
94
Connection AnomalyChecks whether the browser profile behaves like a real device.
95
Audio Suspend BypassChecks whether rendering and device fingerprints fit together.
96
History EvasionChecks for natural mobile use and real browsing behavior.
97
Visited HistoryChecks for natural mobile use and real browsing behavior.
98
Background NavigationChecks whether the browser profile behaves like a real device.
99
Geometry DeltaChecks whether the browser profile behaves like a real device.
100
Speech SynthesisChecks whether the browser profile behaves like a real device.
SIGNAL FAMILY

Advanced CreepJS Evasion Vectors

101
Math Rounding MatrixChecks whether the browser profile behaves like a real device.
102
Error Stack ProxyChecks whether the browser profile behaves like a real device.
103
Silent Audio TrapChecks whether rendering and device fingerprints fit together.
104
CSS Media QueryChecks whether the browser profile behaves like a real device.
105
Emoji Layout SizingChecks whether rendering and device fingerprints fit together.
106
Voice Brand CheckChecks whether rendering and device fingerprints fit together.
INSTANT EDGE DEPLOYMENT

See the bots clicking your ads in real time.

Add BotRefund to your website in under 60 seconds. Continuous behavioral analysis and refund-ready click evidence across every campaign.

Get My Free Bot Audit →
botrefund.com