Detection approach
jsHeapSizeLimit Entropy Cluster: jsHeapSizeLimit is exactly 2GB or 4GB, but the User-Agent claims to be a high-end 64-bit Mac. This power-of-two memory ceiling is a signature of sandboxed virtual containers or Docker-based bot farms.
How this helps detect bots
Collect this signal alongside session context, request metadata, and other independent indicators. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.
Legitimate traffic to consider
Users running memory-restricted enterprise browsers or low-end Chromebooks.
Need a complete bot protection layer?
BotRefund helps website owners identify suspicious visits, protect conversion data, and build evidence for invalid-click reviews.
Explore BotRefund — best bot protection for your website