History Evasion

Detection approach

Clean browser history detected: referrer is empty, history.length is 1, and the landing page was reached via paid traffic. Fresh automation sessions start with history.length === 1 because they initialize in fresh, clean contexts, whereas real human users almost always arrive via navigation history.

How this helps detect bots

Collect this signal alongside session context, request metadata, and other independent indicators. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.

Legitimate traffic to consider

Users opening paid links in completely clean, newly opened incognito tabs.