Calling yourself Safari 1.x.x might be considered a bit of a giveaway as well. And that's speaking as someone who only recently and with extreme reluctance blocked Firefox 2. Cursory detour to raw logs turns up one PhantomJS who acted on js and one that didn't. Both claimed to be Safari version 1.something.
What does "Unknown" mean? Can it ever occur in a human UA?