Can Socks be detected?

T

TheUploader

Registered Member
Joined
Dec 30, 2009
Messages
53
Reaction score
26
Can Socks5 be detected? I have seen some CPA offers that will either not count a socks5 conversion or not let connect to the offer?

i thought socks5 are not detectable.
 
Advertise on BHW
if they are not counted, usually they are not anonymous or they were used already for that offer...either way it isn't good to be doing signups...
 
Well, usually they are not detectable, so for a while, you can get some signups.

But if this CPA agency is serious, they are using some system to detect fake registration:I have some friends that cheat CPA companies until one day the company monitorized his account and caught him.
I usually don't recomend cheat by this way CPA companies, only if that cheat is the only work you do with them and you could lost some time trying...
 
Proxies ARE detectable, period. The kind of proxy is totally irrelevant.

You need to go to extreme measures to hide the fact that you are behind a proxy. Advanced detection methods use Javascript, Flash and Java. Common trick is to compare the timezone. If your browser reports timezone UTC+5 and the geolocation of the proxy is such that the timezone should be UTC-2, you are BUSTED. ;)
 
I am not looking into fraud the companies with any fake information. I was just interested in knowing how they can detect it, when many people say that they are "undetectable".
 
Many "public" socks proxies are running on default ports.
So a simple testing-script can detect that an open proxy is running on those IPs.

Also public proxies are usually abused by many people, so they have been 'ab'used before and are listed in proxy databases.

As people noted before, timezones can be checked. Your browser langauge can be checked .. but those are just clues that indicate you might be using a proxy/vpn.
edit: flash is a risk too
 
Last edited:
Depends on how serious they're about detecting it and also how serious you are about making your proxy socks anonymous. Takes two to tango :)
 
Can you suggest me the source for US SOCKS in a bulk refreshing list? Like 1000+ rotating unique IPs per day? I need it for web browsing like CL, not for spam.
 
Socks can be detected with FLASH on. Test via whoer.net :)
 
jazzc said:
Proxies ARE detectable, period. The kind of proxy is totally irrelevant.

You need to go to extreme measures to hide the fact that you are behind a proxy. Advanced detection methods use Javascript, Flash and Java. Common trick is to compare the timezone. If your browser reports timezone UTC+5 and the geolocation of the proxy is such that the timezone should be UTC-2, you are BUSTED. ;)
Click to expand...
What you're saying is that proxies are useless when not coupled with other means of disabling detection methods. This is one topic, perhaps the one being discussed, but it would be wrong to say proxy types are irrelevant.

I wouldn't go so far as to equate detection methodology with detectability when you're dealing with fundamental proxy protocol. Fundamentally, yes, the SOCKS proxy protocol is in fact undetectable because of the nature of it's functionality. So in that way, it would be wrong to tell people proxy type is totally irrelevant.

If you were to take this debate to winsock software, for example, where headers are constructed by the programmer and where client/server interaction would never render any third party software/scripting/etc on the client-side, SOCKS is in fact undetectable.
 
Last edited:
An example of the abuse a proxy will go through can be seen
by placing it in a google search. A good one might say,
"This ip has had suspicious activity in the past. It seems to be clean
now but we're continuing to watch it's activity."
 
Proxies are detected no matter how smart the user is. Socks are undetectable but it is advised not to cheat as there may be chances of IP getting blocked.
 
savis said:
Proxies are detected no matter how smart the user is. Socks are undetectable but it is advised not to cheat as there may be chances of IP getting blocked.
Click to expand...

I agree proxies are detected no matter what along with other information however the user can spoof information to make them undetectable.

detectable:

-port of ip address : dead giveaway if you are using know ports like 8080..

-time zones of proxy ip does not match actual zone of geolocation: for example ip says you are in new york but your browser is giving geolocation of california (dead giveaway). To detect this go to google and see what time zone it renders for your searches or go to whoer/extended

-Operating system: even a proxy will not spoof your os information even if you use a proxy. if you use a proxy without spoofing os information your user agent will render one operating system and your browser will render a different os information: (dead giveaway) change your os information is browser config.

-plugins: if you use a addon or plugins can be detected for example if you use a plugin to change your user agent and advanced detection system can detect the user agent switcher plugin which is a red flag. Normally users do not use user agent switchers. change your user agent manually in browser config.

-screen resolution: if you try to sign up with the same screen resolution for every signup NOT GOOD. This is another red flag.

-dns server: most proxies do not change your dns server ip address. if you try to generate fake signups and all of your signups have different external ip address but their internal ip address or the dns ip address is the same. This is a major red flag. How can you determine? get a google analytics account and place the code snipet on your website then change your ip address with proxy but do not change your dns ip address and you will notice google analytics will only give you one unique visit even though you changed your external ip address with a proxy. both the external ip address and the internal ip address have to be changed or your out of luck. how to determine internal ip address: DNSLEAKTEST RESEARCH TO CHANGE DNS SERVER IP!!!

-flash cookies: even though you think you might of cleaned flash cookies they can be re-spawned so make sure you clear cookies with programs like adwcleaner, ccleaner, and hitman pro. or manually delete them in this folder: AppData\Roaming\Macromedia\Flash Player .... then restart your computer or use virtual os like vmware then after you clean with all three programs close vmware then restart vmware. YOU HAVE TO RESTART YOUR SYSTEM!!!DONT BE LAZY!!!

disable flash: DO NOT DISABLE JAVA OR FLASH..DEAD GIVEAWAY!

ip address/spam: if you ip address has already been flagged as spam or blacklisted do not use them...check ip address with IP-SCORE or whatismyipaddress.

FOR GOOD MEASURES CHAIN YOUR PROXIES!!!!

HOPE THIS HELPS!
 
proxygo said:
congrats phil u replied to a post from 2011 gave a long speach
and say i hope that helps, lolz oh brother your reply was 3 yrs late
Click to expand...


His account is from 2010, he must have been very busy and only just remembered to reply to the thread lol
 
hes got the right name [ KiLLPHiLL } even got me thinking lol
 
KiLLPHiLL said:
I agree proxies are detected no matter what along with other information however the user can spoof information to make them undetectable.

detectable:

-port of ip address : dead giveaway if you are using know ports like 8080..

-time zones of proxy ip does not match actual zone of geolocation: for example ip says you are in new york but your browser is giving geolocation of california (dead giveaway). To detect this go to google and see what time zone it renders for your searches or go to whoer/extended

-Operating system: even a proxy will not spoof your os information even if you use a proxy. if you use a proxy without spoofing os information your user agent will render one operating system and your browser will render a different os information: (dead giveaway) change your os information is browser config.

-plugins: if you use a addon or plugins can be detected for example if you use a plugin to change your user agent and advanced detection system can detect the user agent switcher plugin which is a red flag. Normally users do not use user agent switchers. change your user agent manually in browser config.

-screen resolution: if you try to sign up with the same screen resolution for every signup NOT GOOD. This is another red flag.

-dns server: most proxies do not change your dns server ip address. if you try to generate fake signups and all of your signups have different external ip address but their internal ip address or the dns ip address is the same. This is a major red flag. How can you determine? get a google analytics account and place the code snipet on your website then change your ip address with proxy but do not change your dns ip address and you will notice google analytics will only give you one unique visit even though you changed your external ip address with a proxy. both the external ip address and the internal ip address have to be changed or your out of luck. how to determine internal ip address: DNSLEAKTEST RESEARCH TO CHANGE DNS SERVER IP!!!

-flash cookies: even though you think you might of cleaned flash cookies they can be re-spawned so make sure you clear cookies with programs like adwcleaner, ccleaner, and hitman pro. or manually delete them in this folder: AppData\Roaming\Macromedia\Flash Player .... then restart your computer or use virtual os like vmware then after you clean with all three programs close vmware then restart vmware. YOU HAVE TO RESTART YOUR SYSTEM!!!DONT BE LAZY!!!

disable flash: DO NOT DISABLE JAVA OR FLASH..DEAD GIVEAWAY!

ip address/spam: if you ip address has already been flagged as spam or blacklisted do not use them...check ip address with IP-SCORE or whatismyipaddress.

FOR GOOD MEASURES CHAIN YOUR PROXIES!!!!

HOPE THIS HELPS!
Click to expand...
Thanks, Phil! Even though you posted 14 years ago, your comment is still serving well, LOL. I was having issues with geolocation detection and never thought that something as simple as the timezone could be causing me trouble. Your comment on timezone really helped me a lot. Thanks!
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top