Monitor Sync Anomaly

Detection approach

The browser's graphics rendering pipeline was tested for physical monitor synchronization. The screen painted frames at impossible intervals that bypassed physical hardware limits, confirming the browser is running in a 'headless' virtual void on a server without a real monitor attached.

How this helps detect bots

Collect this signal alongside session context, request metadata, and other independent indicators. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.

Legitimate traffic to consider

Custom Sync monitors (G-Sync/FreeSync), or overloaded browser processes dropping frame cycles.