Seth Harris
Junior Member
- Sep 14, 2017
- 128
- 57
This is a random notes from my trello which I made during my research on this topic a year ago. Few things might have upgraded since then but this will provide a good summary to all people trying to learn about this topic. Hope you enjoy this thread. 
To spoof fingerprints by antidetect browsers, their are dozens of options available but not all of them are equal. Below are this list of various things I would see depending on the use case before selecting one:
Note, this is not comprehensive list plus few points might not even be correct at this point of time as the notes are almost a year old. Still copying here so that people might get a general idea.
The above part only consisted of browser and ip fingerprinting.
Few other pointers that can be done to maximize privacy is:
This thread does not cover an important concept of Behavior Analysis (Because I am too lazy now to edit the complete notes on it). But it is more of a logical question than technical question and the way different sites analyze behavior can be very different). While Google and major sites can track your entire history of actions and many other things. They even have started the privacy sandbox for controlled analysis - https://privacysandbox.com/open-web/#the-privacy-sandbox-timeline
While a random site's account can track very less of it and would be very easy to bypass.
I'm sure their are many points missing from above and also their might be few pointers which are old or may not be valid. I take full responsibility of the mistake if any. My whole purpose was to give a general idea by sharing this random note of mine.
PS. A link which will always be handy for privacy enthusiasts - https://www.privacytools.io/private-browser
- Websites can track user not just by the ip and cookie and local storage but also by extremely huge amount of parameters.
- Parameters include: Operating system and its version, chrome version, user-agent, timezone, languages, geolocation, webrtc, architecture, screen size, video card, graphics driver, hardware concurrency, device memory, media devices and fonts
- Websites can even track user based on Behaviour Analysis.
One of the best sites to learn in detail - incolumnitas, palant.info, blogs of other good antidetect browsers.
Where can you see you fingerprints and see what all things are tracked by a browser:- pixelscan
- browserleaks
- whoer
- ip-api
- leaksradar
- iphey
- amiunique
- Fakevision
- CreepJS
- coveryourtracks.eff.org
- deviceinfo.me
- privacy.net/analyzer
- fingerprint.com
- https://incolumitas.com/pages/BotOrNot/
- https://proxy.incolumitas.com/proxy_detect.html
- https://incolumitas.com/pages/TCP-IP-Fingerprint/
To spoof fingerprints by antidetect browsers, their are dozens of options available but not all of them are equal. Below are this list of various things I would see depending on the use case before selecting one:
- No of Profiles
- Fingerprint evasion success?
- Pricing
- Local Storage or Cloud Storage or Personal Cloud Storage
- Ability to create Android/iOs profiles?
- Ability to spoof parameters on detection sites when working on mobile profiles or MacOS profiles when working from Windows?
- Cookie Robot (How Advance this can be too?) (Does it has Consent-o-matic?)
- Automation availability (Using Playwright can be helpful as no-code is available)
- Ability to categorize Browser Profiles with ease.
- Bulk Profiles Management
- Changelogs Section and recent updates.
- Does it costs separately to buy fingerprint configs?
- Android app
- Ability to run on MacOS to avoid Hardware spoofing detection?
- Ability to change 4g Proxy IP with API call?
- Ability to Import and Export Cookies Easily?
- Ability to Import and Export Profiles Easily if Local Storage?
- If profiles are migrated to other device or opened from other device, will it change the Fingerprints due to change in IP?
- Support Availability?
- Speed of opening and closing profiles.
- Security of Data in Cloud Storage? As they can see all data and also possibility of DDOS Attack on their servers hampers your work
- Does it fetch Fingerprint automatically from its database or you need to manually change it?
- RAM consumption on device?
- Difference in Monthly and Yearly Pricing?
- Profile sharing capability and permission settings and how advance it is?
- Parallel cloud launches?
- Ability to block a session if it is already opened elsewhere
- Do you require specialty in FB and Google Ads Bulk Management with this? (Like Dolphin Provides?)
- REST API availability and various API endpoints as per use?
- Availability of Good Documentation and Troubleshoot Guide
- Availability of Both Chrome, Firefox, Safari and Edge based Browsers
- Ability to add plugins, bookmarks before creating profile.
- Ability to have iOS based Mobile Profiles which can pass evasion test from above sites?
- Human Typing Emulation while copy pasting data
- Unlimited Profiles or not?
- Battery and storage substitution
- Proxy check on entering
- Does it auto-fetch ISP details from Proxies so as to set right DNS?
- Ability to Tile Browsers automatically at startup while randomly shuffling randomness (Like in identory)
There might be other choices too but it all depends on the usecase.
Few Selected Antidetect browsers include
- Identory, Sessionbox, Kameleo seems to be the best with unlimited profiles. Identory has many more features and is cheaper. It is best to work with local profiles. While Identory is super feature rich , it doesn't yet have android profiles in it. Kameleo has android app and android profiles too. Kameleo lacks many features though like no autorefresh IP, no proper segregation, no warmup, no multiuser
- Multilogin, Octobrowser, Adspower, Incogniton are good to work on cloud but has no local storage. It has only cloud storage. Multilogin is pretty costly. Incogniton has good free plan.
- Undetected and Gologin is great and has both android and iOS profiles too. Gologin has android app too. They allow to work on tons of profiles on cloud. Undetectable has an issue that config needs to purchased separately at $1 each which makes it unreliable for bulk work. I found gologin has suffered from DDOS attack and can get slow at times. Undetected has open store of fingerprint config which can be copied and used on others like incogniton.
- Dolphin Anty seems to be good tool specialising in FB and Google Ads with Bulk Accounts
- Few cheap ones includes : logii, we1town browser
- Others are : Vmlogin, Chebrowser, Linkensphere, Tenebris
Note, this is not comprehensive list plus few points might not even be correct at this point of time as the notes are almost a year old. Still copying here so that people might get a general idea.
The above part only consisted of browser and ip fingerprinting.
Extensions Fingerprinting
- Extension Fingerprinting and how to evade it is mentioned in the following links:
- In Summary, Websites are able to access web accessible resources of the extension. If we change manifest file and hide all files, they can't access any file making them invisible to websites.
- Google search "Security boulevard - How to detect Browser extension".
- https://palant.info (Talks about security but majorly extensions)
- It is required for all extensions to switch to Manifest V3 from V2. Suppsoedly all ad blockers and chromium based browsers will be affected
- Few plugins required by me are invisible to sites - like nopecha and others
- Also, to test any extensions visibility, just have it installed and check on pixelscan.net
- If it is visible, download the plugin and edit it - Google search 'How to edit chrome extension by downloading it'
Few other pointers that can be done to maximize privacy is:
- Change Default Port Number of RDP while working with VPS. They can call upon default ports and detect open ports. If they detect it being run on RDP, it may be a problem.
- Change The MAC address of PC. Can use https://technitium.com/tmac/
- Can use Net-Limiter to change proxies per application
This thread does not cover an important concept of Behavior Analysis (Because I am too lazy now to edit the complete notes on it). But it is more of a logical question than technical question and the way different sites analyze behavior can be very different). While Google and major sites can track your entire history of actions and many other things. They even have started the privacy sandbox for controlled analysis - https://privacysandbox.com/open-web/#the-privacy-sandbox-timeline
While a random site's account can track very less of it and would be very easy to bypass.
I'm sure their are many points missing from above and also their might be few pointers which are old or may not be valid. I take full responsibility of the mistake if any. My whole purpose was to give a general idea by sharing this random note of mine.
PS. A link which will always be handy for privacy enthusiasts - https://www.privacytools.io/private-browser
Last edited:
