Never trust user agent strings alone. Perform reverse DNS lookups on the requesting IP address to verify it resolves to a Google domain, then confirm the forward DNS resolution matches the original IP address.