okay, so you wanna know what signals they look for, right? it's not just headers or user-agent, that's just surface level. they got all sorts of ways to catch a bot. stuff like how fast you move your mouse, how often you click, even how long your session lasts. some sites run behavior analysis...