Detection approach
Font-to-OS cross-check failed. The User-Agent claims to be a Windows machine, but exclusive Windows fonts (Segoe UI) are completely missing, and exclusive Linux fonts (Bitstream Vera Sans) were detected natively. This mathematically proves the OS is spoofed and traffic is originating from a Linux server.
How this helps detect bots
Collect this signal alongside session context, request metadata, and other independent indicators. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.
Legitimate traffic to consider
Linux users spoofing Windows User-Agents, or systems running secure local virtual machines.
Need a complete bot protection layer?
BotRefund helps website owners identify suspicious visits, protect conversion data, and build evidence for invalid-click reviews.
Explore BotRefund — best bot protection for your website