Re:It is not possible to detect and block Chrome headless
by moyix on Thursday January 18, 2018 @04:30PM
(#16181660)
A friend and I wrote a paper about techniques for doing this a while back (never formally published; it was just a class project). My favorite technique for avoiding automated scan environments was to show goatse.cx and then run your code in the onUnload handler when the human frantically tries to close the tab.
http://www.cs.columbia.edu/~brendan/honeymonkey.pdf