Headless Traffic Detection & Redirect

I’m getting a surge of requests that originate from headless browsers and my current behavioural-analysis script just isn’t keeping them out. I need a reliable solution that can: • Detect headless visitors consistently—whether they slip in through altered user-agents or by mimicking normal browsing patterns. • Automatically divert anything flagged as headless to a separate page (or lightweight holding page if you recommend building a fresh one). Legitimate users must continue to browse uninterrupted. You are free to combine JavaScript fingerprinting, server-side checks, bot-score APIs, or any other proven technique, as long as it keeps false positives low. Clear, well-commented code and a short read-me on how to tweak thresholds are essential so I can maintain it myself later. Deliverables 1. Detection logic (front-end and/or back-end) packaged for easy drop-in. 2. Redirect mechanism wired to the detection outcome. 3. Brief deployment guide plus test cases that show genuine users allowed through and headless tools (Puppeteer, Selenium, etc.) rerouted. I’ll spin up a staging environment for testing as soon as you provide the first draft, and we’ll iterate until the results are solid.