Scrollbar Width Leak

Detection approach

The visitor's browser claimed to be running on a standard Windows machine, but the physical geometry and pixel width of the screen's scrollbar matched a Linux server or headless environment. Scraper bots easily fake their text identity, but they routinely fail to fake the core graphics rendering engine of the operating system.

How this helps detect bots

This signal is assessed with other independent session, browser, and network evidence. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.

Legitimate traffic to consider

Linux workstation users, or users customizing their browser scrollbar width templates.