HTTP Sec-CH-UA brand contradicts the JS UA browser
net.ch_ua_vs_ua_browser · convicts
network, browserlayer
coherencecategory
3evaders caught
What it catches
Cross-layer browser coherence; Chromium sends Sec-CH-UA from its real brand under any UA
Signals it reads
network.ch_ua_browser browser.ua_browser
How it fires
not_equal
Evaders it caught 3
Bypassed by 10
Frontier evaders that reach the detector uncaught (scored only suspicious, defeating every convicting tell) — this check is not one that stops them. The red-team frontier this detection still has to convict.