How is TrafficArmor detecting BrightData/Luminati residential proxies?

M

maxarbitrage

Junior Member
Joined
Dec 17, 2016
Messages
108
Reaction score
25
Hey guys, so I'm testing this from TA's email a few days ago: https://demo.trafficarmor.com

It detected all the proxy services I use. BrightData/Luminati, StormProxies, LocalProxies, you name it.. Video here: https://streamable.com/skbtxa

I tested using proxies from the same city as mine and they detected it. None of the other cloakers were able to do this so I dont get it.

How it works ? What are they doing different from other cloakers? Is it just a big database of IP addresses?

Thanks
 
Advertise on BHW
Network/TCP fingerprints most likely, if they do not match your useragent, you get flagged, for this reason Im now developing TCP fingerprint spoofer as because instagram seems to sometimes take this into building trust score as well.

Check what OS you get reported here when you check your connection: https://browserleaks.com/ip
 
Last edited:
maxarbitrage said:
Hey guys, so I'm testing this from TA's email a few days ago: https://demo.trafficarmor.com

It detected all the proxy services I use. BrightData/Luminati, StormProxies, LocalProxies, you name it.. Video here: https://streamable.com/skbtxa

I tested using proxies from the same city as mine and they detected it. None of the other cloakers were able to do this so I dont get it.

How it works ? What are they doing different from other cloakers? Is it just a big database of IP addresses?

Thanks
Click to expand...
Screenshot_20221105-091935_Chrome.jpgi use cheap proxy and not detect it. i use packetstream
 
maxarbitrage said:
Hey guys, so I'm testing this from TA's email a few days ago: https://demo.trafficarmor.com

It detected all the proxy services I use. BrightData/Luminati, StormProxies, LocalProxies, you name it.. Video here: https://streamable.com/skbtxa

I tested using proxies from the same city as mine and they detected it. None of the other cloakers were able to do this so I dont get it.

How it works ? What are they doing different from other cloakers? Is it just a big database of IP addresses?

Thanks
Click to expand...
Most cloakers detect those ips.
 
areyka88 said:
View attachment 231448i use cheap proxy and not detect it. i use packetstream
Click to expand...
Bullshit, made me waste time and money. $50 minimum deposit is not cheap. It detected all of their IPs: https://streamable.com/dsi5f7

Looks like you were using mobile, probably didn't setup the proxy properly and it was direct connection

CloakerLy said:
Most cloakers detect those ips.
Click to expand...
What are you talking about? I am in a group chat with a lot of affiliates, none of them 100% detected residential proxies when city is the same as the proxy.

Please give me demo link and I'll test it with CloakerLy but I am confident it was tested since your service is popular. I tried contacting your support but no response on email or Skype for 2 days already.

lucky.sparks said:
Network/TCP fingerprints most likely, if they do not match your useragent, you get flagged, for this reason Im now developing TCP fingerprint spoofer as because instagram seems to sometimes take this into building trust score as well.

Check what OS you get reported here when you check your connection: https://browserleaks.com/ip
Click to expand...
It says I am on Windows which is right so I don't think its this unfortunately. Only useful response so far in the thread so thank you.
 
@maxarbitrage don't get me wrong, but that's not how proxies should be used.

First, your browser will have the same unique id, and maybe you can try hundreds of proxies or no proxies, and you will still be detected. See:

Code: 
https://fingerprintjs.github.io/fingerprintjs/

Even if you clear your browser session, it's still the same browser id, even if you change your IP. Browser should be closed before testing another proxy. (Although this won't fix your problem).

Second, what's the DNS IP? Probably that is leaking. See

Code: 
https://whoer.net/dns-leak-test

Third, WebRTC?

Other than this, probably those companies share their proxies with cloakers, after all, is all about money.
 
maxarbitrage said:
It says I am on Windows which is right so I don't think its this unfortunately. Only useful response so far in the thread so thank you.
Click to expand...
Interesting, using VPN or proxy? Please check what http://witch.valdikss.org.ru/ gives for you. Only a few proxy providers will have abilities to spoof your OS, so if it says windows - either you are using VPN or a high-tier proxy that can spoof it.(edit: only now Ive noted you are asking about bright data, they have this feature).

Another thing they could look for is timezone differences in your browser, e.g. - if your timezone says Eastern Europe but you are connecting from New York, it's enough for them to be sus again.

Another thing to look for is WebRTC - if you are using a proxy, this thing will reveal your real IP, and again - if they are different, it's easy for those sites to understand that something is off.

With both any stealth browser will help, e.g. dolphin anty has 10 free profiles with which you can experiment.

Then do
1) https://www.ipqualityscore.com/free-ip-lookup-proxy-vpn-test
2) https://scamalytics.com/ip

To check if your IP is clean and not reported.
 
Last edited:
lucky.sparks said:
Interesting, using VPN or proxy? Please check what http://witch.valdikss.org.ru/ gives for you. Only a few proxy providers will have abilities to spoof your OS, so if it says windows - either you are using VPN or a high-tier proxy that can spoof it.(edit: only now Ive noted you are asking about bright data, they have this feature).

Another thing they could look for is timezone differences in your browser, e.g. - if your timezone says Eastern Europe but you are connecting from New York, it's enough for them to be sus again.

Another thing to look for is WebRTC - if you are using a proxy, this thing will reveal your real IP, and again - if they are different, it's easy for those sites to understand that something is off.

With both any stealth browser will help, e.g. dolphin anty has 10 free profiles with which you can experiment.

Then do
1) https://www.ipqualityscore.com/free-ip-lookup-proxy-vpn-test
2) https://scamalytics.com/ip

To check if your IP is clean and not reported.
Click to expand...
thank you for all the valuable information can you suggest any proxy provider to use them
 
Otman Novovic said:
thank you for all the valuable information can you suggest any proxy provider to use them
Click to expand...
Check the marketplace or my signature. Selling outside of the marketplace is forbidden so its the best to go check marketplace threads and/or open WTB thread.
 
maxarbitrage said:
Hey guys, so I'm testing this from TA's email a few days ago: https://demo.trafficarmor.com

It detected all the proxy services I use. BrightData/Luminati, StormProxies, LocalProxies, you name it.. Video here: https://streamable.com/skbtxa

I tested using proxies from the same city as mine and they detected it. None of the other cloakers were able to do this so I dont get it.

How it works ? What are they doing different from other cloakers? Is it just a big database of IP addresses?

Thanks
Click to expand...
Which test is it?
 
use a privacy browser instead of an extension, your normal browser still has fingerprints and user data which sites can get
the least you can do is to use a privacy browser and then decide if it is the proxys fault
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top