I finally had the time to analyze the source code. The detector logic is a user agent string matcher which uses a weak heuristic. Its able to detect bots that are polite and identify them e.g. Googlebot, GPTBot, ClaudeBot, and against silly scrapers that try .env or burst-request.
No wonder it...