// vendor intelligence
what anubis detects
anubis is a pow-wall vendor. it declares native challenge (3/3), native attestation (3/3) capability. below: the layers it enforces and the cookie, endpoint, and header tells it leaves.
catalog data undated confirmed
enforced detection layers
| detection layer | capability | what it covers |
|---|---|---|
| tls / network fingerprint | unaddressed | the ja3/ja4 clienthello and http/2 settings signature the edge reads before any javascript runs. |
| ip reputation | unaddressed | asn, proxy-class, and abuse-history scoring of the connecting address. |
| js fingerprint | unaddressed | canvas, webgl, navigator, font, and audio signals collected in-page. |
| behavioral | unaddressed | mouse, keyboard, and timing biometrics read from interaction cadence. |
| challenge | 3/3 native | interactive or invisible captcha and proof-of-work gates. |
| attestation | 3/3 native | hardware or os-backed integrity checks (webauthn, play integrity, device attestation). |
| server coherence | unaddressed | cross-checking headers, tls, ip, and js for internal consistency. |
unaddressed means this tool type does not operate at that layer, so it is not a failing score. a red 0/3 is a real, declared score of zero. both are declared capability, not live pass-rates.
tells
- cookies
- anubis-auth (prefix varies by deploy)
- endpoints
- self-hosted challenge path, often under /.within.website/
- header tells
- anubis
foss anti-AI-crawler wall; client computes a sha-256 hashcash PoW, server verifies leading-zero difficulty and issues a jwt-style auth cookie. no scoring, just cost.
questions
- what does anubis detect?
- it declares native challenge (3/3), native attestation (3/3) capability. layers not listed are not enforced by anubis.
- what are anubis's tells?
- header/script tells: anubis. cookies: anubis-auth (prefix varies by deploy). endpoints: self-hosted challenge path, often under /.within.website/.
other vendors
where to go from here
layer intensities are catalog-declared (0..3), confirmed, and the catalog carries no capture date for this record. layer definitions in the glossary.