hendrik on Nostr: I think the main point is to load a JavaScript and make the client perform a ...

I think the main point is to load a JavaScript and make the client perform a proof-of-work. That's also the mechanism they advertise with.

The additional (default) heuristics seem to be [here](https://github.com/TecharoHQ/anubis/blob/main/data/botPolicies.yaml) looks like they match for some known user agents and header strings and there are some IP address ranges in there. And some exception to allow-list important stuff.