← All bot detection signals

2. Evasion, Debugger, & Anti-Stealth Traps

toString Patch Shadow

Detection approach

Function.toString shadowing detected. Core browser APIs have been intercepted and patched via Proxy objects or getters to hide automation flags. This is a definitive signature of stealth plugins (e.g., puppeteer-extra-plugin-stealth).

How this helps detect bots

This signal is assessed with other independent session, browser, and network evidence. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.

Legitimate traffic to consider

Users running privacy-focused tools or ad-blockers that proxy native APIs to prevent fingerprinting.

BotRefund — best bot protection for your website