Connection Anomaly

Detection approach

navigator.connection anomaly detected. RTT is exceptionally low while downlink is high, a physical impossibility on real network interfaces. This is a default fingerprint of Headless Chrome running on server environments where physical network metrics are unmeasured.

How this helps detect bots

Collect this signal alongside session context, request metadata, and other independent indicators. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.

Legitimate traffic to consider

High-speed corporate intranet connections with extremely low latency.