Main World Execution

Detection approach

Script execution and DOM query detected inside the main window execution context. Automation hooks were caught invoking query commands in the document main world instead of using safe isolated execution contexts.

How this helps detect bots

This signal is assessed with other independent session, browser, and network evidence. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.

Legitimate traffic to consider

Users running custom bookmarklets or user scripts (Tampermonkey) targeting elements.