3 ms·

This kind of website detect when you are using a mobile device or not. They can show the spammer website if you are in phone or a different website (like Googl

• frompdx 6y ago
  That's interesting. Forgive my naivety, but what is the value in knowing whether or not I am on a mobile device?
  • Nextgrid 6y ago
    To foil potential investigation attempts. You only serve the malicious payload to the intended targets, and everyone else gets something innocent-looking. In your case, Curl is sending its own user-agent, so not only did you most likely trigger the evasive payload but you also let them know someone is looking too closely at this if they were to check the logs. Next time, try hitting it by setting the user-agent of the intended device. It's not foolproof either (unlike Curl, a typical browser would load images and run Javascript so they can detect it that way) but should be enough for most purposes (they are not trying too hard to hide their tracks, user-agent filtering is very easy to implement so they do it, but anything else is likely too much effort for them to bother).