I’m revealing secrets again, part 2

Why Google bans your account even before the first click

You bought an expensive antique, set up a profile for Windows 11, installed a cheap proxy server — and you were instantly banned.
Why? You were caught violating TCP/IP rules even before the page loaded.

In the browser: “I’m just a regular home PC with Windows, let me log in to Google Ads.”

At the network level (TCP SYN packet / p0f): the Linux stack fails (server on Ubuntu), the TTL is different (64 instead of 128), and the parameter order is incorrect.

From the perspective of fraud prevention, this is an instant marker: the user logs into the system via a tunnel/proxy and actively masks their activity. The fraud rate skyrockets, and at the very first click on a link to enter a card or make a payment, a warning about suspicious activity appears.


Moral: when using Win-proxy to combat fraud, it is necessary to strictly use the Win TCP stack. If the OS desynchronization indicator is lit in the checkers (BrowserScan / Incolumitas), forget about payments — the account is dead from the outset.

So what are your thoughts about mobile proxies combined with a desktop windows anti detect fingerprint?
Your posts are interesting and I am curious what your thoughts are about this.

intmarketing said:

So what are your thoughts about mobile proxies combined with a desktop windows anti detect fingerprint?
Your posts are interesting and I am curious what your thoughts are about this.

Click to expand...

We have our own solution in place, where each account is assigned its own cloud‑based phone for the purpose of additional checks.

Just use any anti detect brower, such as ads power, dolphin anti or literally any one, as 99,99% of users of this forum does, and set the proxy on the anti detect browser. I really can't even understand how's that could be a problem. I know you "spilled your secret" to advertise your product, but unless it's something cheaper than geelark for cloud phones, you probably need at least a junior vip account to run your ads here.

itsworth said:

Just use any anti detect brower, such as ads power, dolphin anti or literally any one, as 99,99% of users of this forum does, and set the proxy on the anti detect browser. I really can't even understand how's that could be a problem. I know you "spilled your secret" to advertise your product, but unless it's something cheaper than geelark for cloud phones, you probably need at least a junior vip account to run your ads here.

Click to expand...

Therefore, I’m not advertising anything; I’ll advertise my services once I’ve met the necessary conditions for doing so on the forum.

Being a Windows maximalist or anything absolutist will lead to nowhere in the long run. Tend to agree though, the tech stack that you use defines the success rate of every single attempt at circumventing fraud response. Doesn't imply that you need to be a network-level engineer in order to bypass safeguards or invest 4-5 figures for a single usecase, on the contrary - be smart about what you're trying to accomplish & dedicate the required resources towards achieving the intended goal. Similar to a forward attack position in soccer, kick's a kick but strength, angle and frontal directionality when compared to defense players and goalkeeper's decides whether ultimately it results in a scored goal.

Good write-up. Those browser checkers also don’t tell you exactly what Google’s internal systems are flagging.