These are the values a visit’s list of reasons can hold: 26 weighted rules that add points, and 11 codes worth no points that explain a verdict. The panel shows the label; filters, exports you script and the stored data use the code.
What each rule tests, in plain words: Rules decisive alone and Rules that stack.
01 · The 26 weighted rules
| Code | Label | Points |
|---|---|---|
automation_marker | Automation marker | 100 |
ua_declared_bot | Declared crawler | 100 |
ua_not_a_browser | Not a browser | 100 |
rdns_claim_failed | rDNS claim failed | 95 |
headless_renderer | Headless renderer | 90 |
beacon_forged | Forged beacon timing | 90 |
ua_claim_failed | UA claim failed | 85 |
hostile_probe | Exploit probe | 85 |
refused_attack | Refused attack | 85 |
fp_cluster_proxy_fleet | Proxy fleet fingerprint | 80 |
never_served | Never served anything | 80 |
ua_secch_mismatch | Sec-CH-UA mismatch | 75 |
platform_mismatch | Platform mismatch | 70 |
no_js_on_html | No JS on HTML | 70 |
probe_sweep | Refused probe sweep | 50 |
mostly_refused | Mostly refused | 45 |
hosting_asn_browser_ua | Datacentre + browser UA | 45 |
ua_rotation | User-Agent rotation | 45 |
periodic_timing | Periodic timing | 45 |
refused_403 | Got a 403 | 40 |
no_interaction | No interaction | 40 |
desktop_on_mobile_asn | Desktop on a mobile carrier | 40 |
no_304_on_repeat | No conditional requests | 30 |
no_assets | No sub-resources | 25 |
single_page_10s | Single page, under 10s | 15 |
tz_mismatch | Timezone mismatch | 10 |
02 · The 11 codes worth no points
| Code | Label | Meaning |
|---|---|---|
arrived_from_somewhere | Arrived from somewhere real | A search engine, social network or another site sent the visit; points were taken off. |
site_identified_visitor | Signed in | Your site named the visitor through the beacon, so the verdict is human. |
strong_human_evidence | Measured as a person | Real interaction and engaged time held the verdict at unknown instead of a bot verdict. |
short_visit | Too short to call human | Under 30 seconds: at most likely human. |
no_page_requested | No page requested | Only assets were fetched: at most likely human. |
short_visit_no_beacon | Under 30s and no beacon | Brief and no beacon at all: called a bot. |
no_duration_measured | Nothing measured a duration | One request and no beacon: at most unknown. |
provisional_session | Session still open | The 8 rules that wait for the end were not evaluated yet. Nothing was detected. |
no_testable_evidence | Nothing testable | Nothing that could clear the visit was observable, so it is held at unknown. Nothing was detected. |
beacon_only_session | One plane only | No access log behind the visit; the 12 rules that read the log were not evaluated. |
no_bot_signals | Nothing fired | Every rule ran and none fired. The absence of evidence, not proof of a person. |
The list is never empty
A visit with nothing against it carries no_bot_signals, so “nothing fired” and “the scorer did not run” never look the same.