Think of it as a full-body scanner. Amazon's 2026 anti-bot system evaluates six layers at once, continuously, from the first TCP SYN packet through every scroll and click: IP reputation and ASN analysis, TLS fingerprinting (JA3/JA4), browser environment detection, behavioral biometrics, CAPTCHA challenges, and ML-driven anomaly detection.
What all six layers share is an obsession with consistency. A User-Agent claiming Chrome on Windows while the TCP window size reads 29,200 and the TTL arrives at 64, both Linux kernel defaults, tells the system the session is fabricated before a single page element loads. The mismatch is the signal.