Can you detect a VPN with JavaScript?
What JavaScript can reveal about a VPN: time zone vs IP country, WebRTC addresses, and the server-side check that turns a browser token into a decision.
Betrug besser verstehen.
Erkenntnisse aus der Praxis, konkrete Playbooks und Integrationsanleitungen. Für alle, die Registrierung, Anmeldung und Checkout schützen.
Neueste
VergleicheMaxMind vs IPinfo vs IP2Location: IP geolocation APIs and databases compared
MaxMind, IPinfo, IP2Location, DB-IP, ipgeolocation.io and ip-api compared from their own pages: free databases and APIs, licences, updates, prices and accuracy.
GrundlagenWhat is an ASN? Autonomous system numbers explained, and how to find the ASN of an IP
An ASN identifies a network that routes its own IP addresses. What autonomous system numbers are, who gets one, reserved ranges, and how to find an IP’s ASN.
GrundlagenCan websites tell you’re using a VPN? How they know, and why yours gets flagged
Usually, yes. How websites tell you’re on a VPN, why some block it or ask for more, why “VPN detected” appears without one, and how to check yours.
VergleicheProxy detection APIs compared: free tiers, residential and mobile proxies
Thirteen proxy detection APIs compared from their own pages: which free plans flag residential proxies, which charge for it (from $19 a month) and the terms.
Betrugs-PlaybooksEmail bombing: what to do when your inbox is flooded, and how to keep your forms out of it
Email bombing buries one alert under thousands of real signup emails or sets up a fake IT-support call: steps for victims, IT teams and the sites sending it.
IntegrationsanleitungenDatacenter IP detection: how it works and what it cannot tell you
How datacenter IP detection works (cloud range files, the routing table, live visits) and why a cloud address alone is not evidence of fraud.
Betrugs-PlaybooksPromo code abuse: how coupon farms work and where to stop them
How promo code abuse works, from new accounts and burner inboxes to proxies and fake browsers, and which checks belong at signup and at code redemption.
ErkennungsforschungI tested Aurorium, the antidetect browser advertised on WWH Club
Aurorium is an antidetect browser with AI fingerprints, advertised on the WWH Club fraud forum. In our live check it was flagged for review on its first visit.
ErkennungsforschungMobile proxy detection: a 4G/5G mobile proxy, blocked on its first visit
Mobile proxies relay traffic through phones and SIM cards on shared carrier IPs. We tried one sold as an Estonian 4G/5G SIM proxy: blocked on its first visit.
Meistgelesen
- 01How to Detect Residential Proxies in 2026
- 02Free VPN Detection APIs Compared: Limits, Inputs and Terms
- 03Card Testing Attacks: How Bots Drain Stripe Accounts in 2026
- 04Headless Browser Detection in 2026: What Still Works
- 05CAPTCHA Farm Economics: How $0.001 per Solve Killed Bot Detection
- 06Detecting Antidetect Browsers in 2026
- 07How to Detect Puppeteer & Playwright in 2026
- 08Shopify Bot Detection: Checking Drop Orders Before They Ship
Residential proxy botnets: where ‘clean’ home IPs really come from
Residential proxy botnets run on infected TV boxes, old routers and free VPNs. What the 2024–2026 takedowns show, and what your signup form still sees.
Proxy SDKs and proxyware: how apps turn their users into residential proxies
Proxy SDKs pay app makers per download or per gigabyte to route strangers’ traffic through users’ phones, PCs and TVs. How they work and what they risk.
AI Agent Traffic: Telling Assistants From Attackers
Browser-using AI agents trip every legacy bot control. How to separate declared crawlers, user-driven agents, and attackers wearing agent clothing.
Betrugs-Playbooks
Ein Angriff pro Beitrag: wie er abläuft, warum die übliche Kontrolle ihn verfehlt und wo die Prüfung hingehört.
Alle 25 Artikel
How do you stop credential stuffing through residential proxies?
Protect logins from residential-proxy credential stuffing with layered limits, live network and device checks, MFA and a safe review flow.
How can a marketplace detect fake accounts without adding CAPTCHAs?
Detect marketplace account abuse with live visitor checks, server-verified review and safeguards for listings, messages and referral rewards.
Fake dating profiles: how the farm runs and where to stop it
One machine behind fifty verified profiles: why photo and email checks pass a profile farm, and the device-linking check that goes before the profile is shown.
Should you block antidetect browsers or send them to review?
A base policy for antidetect signals: when to block a fake browser, when review is safer, where privacy browsers cause false alarms and how to measure it.
Why do antidetect browsers and proxies still give each other away?
Every antidetect profile is sold with a proxy slot. Where the browser story and the network story disagree: time zone, WebRTC, TLS and proxy-pool history.
How do you test antidetect browser detection?
Test real antidetect profiles against normal browsers, distinguish missed detections from missing signals, and measure customer impact before blocking.
Vergleiche
Direktvergleiche und Kategorie-Übersichten, einschließlich der Fälle, in denen der andere Anbieter die richtige Antwort ist.
Alle 8 Artikel
DataDome vs Maskbreak: Perimeter Bot Defence or Action-Level Verdicts
DataDome mitigates bots at the perimeter. Maskbreak returns a verdict at the action. The distinction decides which one fits the abuse you actually have.
Best Fraud Detection APIs in 2026: 10 Compared
Ten fraud detection APIs compared on the signals they return, published prices and free tiers, with six test sessions that show which layer each one can see.
Fake account detection and prevention software: 8 tools compared
Eight fake account detection tools compared from their own pages: what each checks at signup, its free plan, its price and where it beats Maskbreak.
Is an IP Address Personal Data Under GDPR?
Yes, dynamic addresses included. What that means for a fraud check: lawful basis under Art. 6(1)(f), data minimisation, retention and processor questions.
Is Device Fingerprinting Legal? GDPR, ePrivacy, and Fraud Prevention
What EU and UK law says about device fingerprinting for fraud prevention — lawful basis, the ePrivacy consent question, and what to check first.
Should You Block AI Agents? A Short Decision Guide
A one-page framework for deciding whether AI agent traffic is a threat, a customer, or both — and what to do at each answer.
Notizen
Was sich geändert hat und warum.
Fraud Brief
Die VPN-, Proxy- und Bot-Muster, die wir diesen Monat gesehen haben
Eine E-Mail im Monat darüber, was sich im Traffic, den wir prüfen, geändert hat — neue VPN- und Proxy-Netze, neues Bot-Tooling, was unsere Laborläufe ergeben haben. Geschrieben für Engineers. Abmeldung mit einem Klick.