botrefund.com
← All detection signalsDETECTION SIGNAL

Residential Proxy TCP Clamping

A closer look at the browser, network, or interaction evidence behind this signal.

What we test

TCP SYN packet inspection on port 8443 revealed abnormal MSS clamping (MSS <= 1420 bytes, typical of WireGuard/SOCKS5 tunnels) on a consumer broadband IP (Comcast, AT&T) claiming desktop Ethernet.

Why it matters

This observation provides context for reviewing a session. Assess it alongside other independent evidence and the conditions under which it was collected.

EXPLANATION

How to interpret the response

01   EXPECTED RESPONSE

Normal browser

The checked observation does not show the condition described above, or the measurement is unavailable. A missing measurement is inconclusive.

02   POSSIBLE ANOMALY

Bot-managed browser

The condition described above may appear in an automated or proxied session. It can also have legitimate causes and needs corroboration.

Browser versions, device settings, extensions, accessibility tools, and network conditions can affect results. These examples are illustrative, not a specific visitor record.