Detection approach
The visitor's browser claimed to be running on a standard Windows machine, but the physical geometry and pixel width of the screen's scrollbar matched a Linux server or headless environment. Scraper bots easily fake their text identity, but they routinely fail to fake the core graphics rendering engine of the operating system.
How this helps detect bots
Collect this signal alongside session context, request metadata, and other independent indicators. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.
Legitimate traffic to consider
Linux workstation users, or users customizing their browser scrollbar width templates.
Need a complete bot protection layer?
BotRefund helps website owners identify suspicious visits, protect conversion data, and build evidence for invalid-click reviews.
Explore BotRefund — best bot protection for your website