Detection approach
The browser's native window.open function was overwritten by a custom script instead of [native code]. Puppeteer and other automation frameworks often replace this API to suppress pop-ups or control navigation. If an ad-blocker is detected, the score is downgraded to 20.
How this helps detect bots
Collect this signal alongside session context, request metadata, and other independent indicators. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.
Legitimate traffic to consider
Users running adblockers (like uBlock Origin) that override window.open to block popup ads.
Need a complete bot protection layer?
BotRefund helps website owners identify suspicious visits, protect conversion data, and build evidence for invalid-click reviews.
Explore BotRefund — best bot protection for your website