1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Anonymity for begginers. 10 ways to detect your facebook account is a fake (Pt.1)

Discussion in 'FaceBook' started by russian racket, Oct 23, 2017.

  1. russian racket

    russian racket Jr. VIP Jr. VIP Premium Member

    Joined:
    Aug 18, 2011
    Messages:
    663
    Likes Received:
    345
    Location:
    http://likepusher.com
    Home Page:
    As internet marketers we are always in need of fake social net accounts. We buy and create them almost every day and most times we loose them very quickly. Sometimes it feels like the energy and money we put into that just burns in that infinite circle of roadblocks. But here is the thing. If you use your real facebook account you can do almost whatever you want to without getting blocked. So what we do wrong with those we use for promotion? How does facebook detect these accounts as fake ones?


    You’d say: “Hey, Russian, that’s simple! It’s proxies”, somebody else would say: “No, it’s not proxies, it’s the number of friend requests per day! Just follow the right numbers and you’ll be alright”! Next day you buy most expensive proxies, do the right number of friend requests and guess what? All your accounts are dead. So to answer that question we should take a look at the process from another side. Can you imagine how do your accounts look like for facebook? Well, you’d say: “first of all it’s a data like login and pass, photos, shares and stuff located on fb servers”. That’s true, but there is another important thing. It’s the internet connection between your accounts and facebook. If you don’t use POST/GET requests, your connection must be going through web browser: Chrome, Mozilla, IE, Safari or whatever. To connect to the website browser is providing his preferences, information about the system and TCP/IP connection, different types of Cookies.

    Let’s take a short trip through some of them:


    1. HTTP Headers

    Headers that your browser contains while it’s sending http requests to facebook. For example it tells facebook what encoding you use, what language you prefer and what type of content is suitable for browser.

    HTTP_ACCEPT text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
    HTTP_ACCEPT_ENCODING gzip
    HTTP_ACCEPT_LANGUAGE ru,en;q=0.8



    2. User Agent

    User agent is a kind of technical “name” of your browser. It tells facebook which browser of which version you use and what OS is installed on the computer. I personally use Yandex Browser on Win7 , which you can find out from my User Agent


    HTTP_USER_AGENT

    Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 YaBrowser/17.9.1.768 Yowser/2.5 Safari/537.36


    3. IP Address


    Your IP is the name of your computer in the world web. It tells facebook about your location, provider and your ASN (Autonomus System Number). IP can be blacklisted by different spam-fighting organizations like The Spamhaus Project (spamhaus.org), it might be a part of suspicious ASN which makes all IP’s of this network automatically not-trusted. Location of the proxy can be not matched with GeoLocation or Timezone which are set in your browser.


    4. DNS

    DNS means Domain Name Service. Each url is just the second name of a regular IP address of a server. Every time you type in your browser any URL it sends a request to the service (DNS) that storages a giant list of domains and their ip addresses. Only after you got an answer from DNS, your PC receives an IP address of the website you requested and then you can browse it. DNS solution is set in your browser preferences, if you’re browsing the web from India and you’re still resolving domains from US DNS that might be suspicious.

    I am using Google DNS and my DNS resolver is located in Finland:


    Your DNS Servers
    IP Address : 173.194.98.11
    Hostname : n/a
    ISP : Google
    Location : Finland, Lappeenranta



    5. TimeZone and GeoLocation


    That’s actually very simple. Your browser is providing your timeset and geolocation. If you imitate an US user having European timeset and location – that is a huge mismatch.


    Zone: Europe/Moscow
    Local: Mon Oct 23 2017 02:15:45 GMT+0300 (MSK)
    System: Mon Oct 23 2017 03:15:45 GMT+0400



    6. Navigator object



    Navigator object contains full information about your browser. It has a lot of field which are different for each browser. Besides simple settings as user-agent and languages it can tell which processor is inside your PC, do you allow or not third-part cookies, your OS platform and much more. Navigator object must be synchronized with your browser and it’s version.


    productSub 20030107
    vendor Google Inc.
    hardwareConcurrency 8
    cookieEnabled true
    appCodeName Mozilla
    appName Netscape
    appVersion 5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 YaBrowser/17.9.1.768 Yowser/2.5 Safari/537.36
    platform Win32
    product Gecko
    userAgent Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 YaBrowser/17.9.1.768 Yowser/2.5 Safari/537.36
    language ru
    languages ru,en

    doNotTrack null



    7. WebRTC and Media Devices



    WebRTC is peer to peer protocol you are using for making online calls and other communication connected with audio. If WebRTC is enabled it shows your IP and Local IP, plus it provides the list of media devices connected to your PC as: dynamics, earphones and a soundcard.


    kind: audioinput

    deviceId: 6fda1fd9cc1d2d0b18570fa94819133761ced7899166de2bf46e0a19b714fb41 label: PreSonus FireBox Mic/Inst 1/2 (PreSonus FireBox WDM)


    kind: audioinput deviceId: 15b4cb51fcac8e35ff2f4edf00f1c2f21e45d49e5d897d7b994d642b93004c6a label: Микрофон (Realtek High Definition Audio)



    8. Plugins



    Via javascript facebook can detect which plugins and add-ons are installed in your browser. Mostly these plugins are like Adobe Flash, PDF Viewer or something similar. Each user has his unique combination of plugins with different version.


    Shockwave Flash
    pepflashplayer32_27_0_0_130.dll
    Widevine Content Decryption Module
    widevinecdmadapter.dll



    9. Screen Settings

    These preferences are telling a lot about your screen. They consist of dept-color, pixel size (also known as page scale), height and width of your browser window. According to simple logic they can’t be equal for each user.


    10. Flash


    That badboy is a total disaster in your anonymity. It will tell everything about you with no shame. Different browsers are using the only one Flash player installed on your PC, so even if you change browsers it still will be possible to detect you as the same person. Flash uncover your IP address, version of Flash, fonts installed on your PC and provides Flash Cookies that storage on your HDD. Be very careful using Flash.



    Finale

    Using all data your browser is able to provide antifraud system creates a unique fingerprint of the user. If you are trying to create multiplie facebook accounts using same preferences or changing only some of them - they will be detected as similar and blocked. The main facebook rule is about each person having the only one account. So when you are using poor software it will show to facebook that all your accounts are using the same machine, that's why your accounts are getting blocked and marked as fake ones.

    P.S.

    If you found my post useful, please, left a comment or just push "thank you" button. That way i will know that you are interested in information and will be glad to provide you more details in the second part. I can include few more ways to detect your fake accounts, resourses where you can check your settings and fingerprints , that can be very important in your work.

    Do not hesitate to ask questions ;)

    Thank you!
     
    • Thanks Thanks x 61
    Last edited: Oct 23, 2017
  2. fasttrak

    fasttrak Regular Member

    Joined:
    Sep 12, 2016
    Messages:
    453
    Likes Received:
    108
    Gender:
    Male
    >>resourses where you can check you settings and fingerprints

    This would be helpful. Knowing what can be detected is all well and good, being able to test if you are anonymous is much more helpful as then you know what needs fixing.
     
    • Thanks Thanks x 1
  3. Mrkoco

    Mrkoco Power Member

    Joined:
    Feb 23, 2017
    Messages:
    773
    Likes Received:
    268
    Gender:
    Male
    Location:
    Jupiter
    A very interesting read ....... Kindly proceed
     
  4. boldrack

    boldrack Registered Member

    Joined:
    Apr 12, 2016
    Messages:
    70
    Likes Received:
    9
    Gender:
    Male
    first time i'm reading about such thing. It's so informative.
     
  5. sandandkush

    sandandkush Power Member

    Joined:
    May 29, 2015
    Messages:
    751
    Likes Received:
    190
    Very informative. Bessings!
     
  6. raregem009

    raregem009 Regular Member

    Joined:
    Jun 21, 2016
    Messages:
    227
    Likes Received:
    54
    Gender:
    Male
    This is interesting. Waiting for part 2
     
  7. gimmeluthvi

    gimmeluthvi Registered Member

    Joined:
    Jan 23, 2015
    Messages:
    87
    Likes Received:
    33
    Gender:
    Male
    Occupation:
    Public Relations
    Location:
    Jakarta
    I smell money
     
  8. russian racket

    russian racket Jr. VIP Jr. VIP Premium Member

    Joined:
    Aug 18, 2011
    Messages:
    663
    Likes Received:
    345
    Location:
    http://likepusher.com
    Home Page:
    I will post the next part if this topic gets 100 "thanks"
     
  9. Mrkoco

    Mrkoco Power Member

    Joined:
    Feb 23, 2017
    Messages:
    773
    Likes Received:
    268
    Gender:
    Male
    Location:
    Jupiter
    That's a long shot don't you think?
     
  10. russian racket

    russian racket Jr. VIP Jr. VIP Premium Member

    Joined:
    Aug 18, 2011
    Messages:
    663
    Likes Received:
    345
    Location:
    http://likepusher.com
    Home Page:
    The information i provide is hard to find. It's takes time to write this article, so i have to be sure people really need it
     
    • Thanks Thanks x 2
  11. redarrow

    redarrow Elite Member

    Joined:
    Apr 1, 2013
    Messages:
    5,974
    Likes Received:
    1,438
    so how comes no smart programmer not made a application to set and fake and block all settings so we can make accounts.....

    multilogin has been sucessfull exsplain that then ?

    i am prety sure there a underground fingerprint database you need to pay for as a subscription to keep up with fingerprint info
    not as stright foward as the htaccess we find in places ....

    cloaks pay for that info aswell very sure hidden info very exspensive

    there more to it i recon i understand all infact learned most of it via php programming .....
     
    Last edited: Oct 24, 2017
  12. jayjay333

    jayjay333 Newbie

    Joined:
    Jun 2, 2017
    Messages:
    44
    Likes Received:
    7
    Gender:
    Male


    There is software already to beat all of this you need to search for it.
     
  13. redarrow

    redarrow Elite Member

    Joined:
    Apr 1, 2013
    Messages:
    5,974
    Likes Received:
    1,438
    where never seen it never heard of such apps...

    please pm a example
     
  14. jayjay333

    jayjay333 Newbie

    Joined:
    Jun 2, 2017
    Messages:
    44
    Likes Received:
    7
    Gender:
    Male
    i cant pm bro send me your skype ill show you what you need
     
  15. X-R0

    X-R0 Regular Member

    Joined:
    May 7, 2017
    Messages:
    290
    Likes Received:
    100
    Gender:
    Male
    A good guide for beginners
    to stay under the radar.

    Their are many possibilities for leaving footprints
     
  16. BloodyNinja

    BloodyNinja Power Member

    Joined:
    Oct 28, 2013
    Messages:
    605
    Likes Received:
    586
    Location:
    Deeptown
    You are right about everything but I would add the type of IP address is extremely important nowadays. Accounts created from data center IP proxy don't live long.

    Also, it seems like FB is starting toying with hardware fingerprints like WebGL and AudioContext. Let alone canvas fingerprint it has been using for a while.
     
  17. russian racket

    russian racket Jr. VIP Jr. VIP Premium Member

    Joined:
    Aug 18, 2011
    Messages:
    663
    Likes Received:
    345
    Location:
    http://likepusher.com
    Home Page:
    Sure, i will show how to change WebGL ImageHash and Audio FingerPrint in the next chapter it community is interested in this. In this particular article i show basic parameters that begginers have to check to make sure the software they use is working properly. Because if your software doesn't change these parameters you can delete it right now and forget about it
     
    • Thanks Thanks x 2
  18. Deutsch69

    Deutsch69 Senior Member

    Joined:
    Nov 27, 2015
    Messages:
    850
    Likes Received:
    90
    Gender:
    Male
    Occupation:
    affilation
    Location:
    Frankfurt
    what s name of software please? i need it urgently
     
  19. gman777

    gman777 Jr. VIP Jr. VIP

    Joined:
    Apr 7, 2016
    Messages:
    715
    Likes Received:
    624
    That's definitely not beginner level information, but thanks. Good tutorial.
     
  20. russian racket

    russian racket Jr. VIP Jr. VIP Premium Member

    Joined:
    Aug 18, 2011
    Messages:
    663
    Likes Received:
    345
    Location:
    http://likepusher.com
    Home Page:
    Thank you very much! I just want to make point that if this is not a begginer level for you, you should definetely step up your game. These thing are very simple. All whats going next is much deeper. You have to be ready ;)