Timezone Evasion

Detection approach

Timezone discrepancy evasion signature detected. The visitor's browser claimed a specific local timezone in its system configuration, but the actual geolocated timezone of their HTTP proxy connection, leaked WebRTC interface, or out-of-band DNS resolver belongs to a completely different geographic region. Timezone mismatch is a definitive indicator of proxy/VPN routing and location evasion, typical of remote human click farm workers.

How this helps detect bots

Collect this signal alongside session context, request metadata, and other independent indicators. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.

Legitimate traffic to consider

Travelers, remote workers, or users on mobile networks (like Starlink or cellular) where traffic is dynamically routed to gateways in adjacent timezones.