Arachnid Shield API
How to detect Arachnid Shield API
Arachnid Shield API signs its requests, so you detect it by verifying the cryptographic signature on each request. A valid signature proves the request came from Canadian Centre for Child Protection; a copied user agent without the signature does not.
- Detection method
- SignedThe agent signs its requests, so its identity is verified cryptographically.
- Signals that identify it
- CryptographicA signed request verified cryptographically
- BehavioralHow the session clicks, types, moves and navigates, checked after the signature is verified
Every signal Verisoul checks for Arachnid Shield API
Arachnid Shield API signs its requests, so we verify who it is cryptographically, then check the rest of the session.
- Used
Cryptographic
A signed request verified cryptographically
- Not used
Network
Not needed to identify it
- Not used
Device
Not needed to identify it
- Used
Behavioral
How the session clicks, types, moves and navigates, checked after the signature is verified
How often you'll see it
Very uncommon
Rare, brand new, or not seen on Verisoul traffic yet
Questions about Arachnid Shield API
How do you detect Arachnid Shield API?
Arachnid Shield API signs its requests, so you detect it by verifying the cryptographic signature on each request. A valid signature proves the request came from Canadian Centre for Child Protection; a copied user agent without the signature does not.
What is Arachnid Shield API?
Arachnid Shield API is an automated service from Canadian Centre for Child Protection that signs its requests.
Does Arachnid Shield API identify itself?
Yes. Arachnid Shield API signs its requests cryptographically, which is the strongest way an agent can identify itself.
Can a bot pretend to be Arachnid Shield API?
Not convincingly. A bot can copy Arachnid Shield API's user agent, but without Canadian Centre for Child Protection signing keys its requests fail verification and it is not labeled Arachnid Shield API.
How common is Arachnid Shield API?
Very uncommon. Rare, brand new, or not seen on Verisoul traffic yet.
What does the Verisoul API return for Arachnid Shield API?
Every session Verisoul identifies as Arachnid Shield API carries an agent block with id "arachnid_shield_api", name, provider, type "other", detection_method "signed" and the detection_signals used (cryptographic, behavioral). Build rules on the id, type and detection method.