2. Evasion, Debugger, & Anti-Stealth Traps
Permissions Proxy Lie
Detection approach
Proxy lie detected on navigator.permissions.query. Function.prototype.toString.call() on the query method threw a TypeError instead of returning '[native code]'. Stealth plugins use JavaScript Proxy objects to intercept API queries, but fail toString interrogation.
How this helps detect bots
This signal is assessed with other independent session, browser, and network evidence. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.
Legitimate traffic to consider
Users running privacy extensions that block geolocations or permissions checks by proxying the method.