3 ms·

That's interesting. Forgive my naivety, but what is the value in knowing whether or not I am on a mobile device?

• Nextgrid 6y ago
  To foil potential investigation attempts. You only serve the malicious payload to the intended targets, and everyone else gets something innocent-looking. In your case, Curl is sending its own user-agent, so not only did you most likely trigger the evasive payload but you also let them know someone is looking too closely at this if they were to check the logs. Next time, try hitting it by setting the user-agent of the intended device. It's not foolproof either (unlike Curl, a typical browser would load images and run Javascript so they can detect it that way) but should be enough for most purposes (they are not trying too hard to hide their tracks, user-agent filtering is very easy to implement so they do it, but anything else is likely too much effort for them to bother).