Secrets behind 4G Mobile Proxies

Lucas Br said:
This is a good method, or it's steps aren't enough? https://www.blackhatworld.com/seo/m...a-smartphone-you-can-create-50-daily.1084775/
Click to expand...
It depends on the scale in which you're using it and what part of the method you're actually using. This method also heavily dependent on the Android carrier. A lot of carriers will use a device's MAC address to try and give the device the same IP and port as often as possible on a tower(at least in the US). This only changes when the device is in range of another tower. Also putting those extensions on your browser does leave a fingerprint, just not what's thought of in a general sense. Yes it makes your browser harder to fingerprint, but that in itself is a fingerprint. Most users don't try to actively stop their browser from being fingerprinted. It's kinda like going out in public wearing a mask. Yeah no one knows who you are, but you're the only one wearing a mask!

So to answer your question, I believe this method is feasible for one or two accounts a day. But not for making multiple accounts in mass. If you do I'm not sure if the accounts after the first two would last that long.

Also be sure to look up what I mentioned earlier about passive os fingerprinting. There are ways to tell if a device's user agent truly matches with the way it's sending information(the physical packets of data) that can be traced.
 
Advertise on BHW
Jibri Wright said:
So from my experience the things that tend to help an account last the most is the way in which it was made, the uniqueness of the content, and the settings of the bot.

Usually once an account is made, it has a trust score initially given to it that determines how closely Instagram's bot detection API watches the future actions of the account. Instagram lists what they track in their privacy policy.
https://help.instagram.com/402411646841720

Analytics information: This one seems to be influenced the most by your bot settings.

Cookies and similar technologies: This one is affected by how clean the browser or mobile device is that you make the account on (there are ways to completely wipe browsers and devices)

Log file information: The biggy here is the IP address that they log. It seems the IP the account was made on affects the account's lifespan the most. Another thing is that you have to look at the network layer of the device. When sending packets, TCP/IP adds a lot of information on multiple layers. Proxies can only influence the topmost or HTTP layer of a packet. If you go to the IP layer however there's a header called the TTL. I'll let you research that, but different operating systems and devices assign different numbers to this value. So even if you're spoofing a User Agent of a browser, that's only affecting the HTTP header. You'll have to figure out for yourself what number your operating system assigns and how you can change it to mimic other devices. Hint: Look up Passive OS Fingerprinting

Device identifiers: Again this is another reason why a spoofed user agent isn't enough. Instagram is a lot more evasive on people's devices than they think.

Metadata: The information IG gives here is one where you have to read between the lines. If you're using the same content on multiple pages, YOU MUST at least be aware of how they can be traced and linked to one another. After you do that you have to learn how to change all of it. Hint: Look up file hash, pic metadata, image comparison algorithm

Once you know how to make extremely clean accounts, then you can get somewhere in terms of testing settings. I say this because I've gotten away with some pretty aggressive settings recently on new accounts as well as new accounts that kept getting PV'd every other day on some extremely lax settings. It seems that the more Instagram trusts an account initially, the more you can get away with. There are a few other secrets that I've figured out as well but I kinda don't even wanna give the hints out for those. I said that part to say keep testing, there are always small little exploits in code no matter how strict it seems. One day you might stumble across a few that make no sense why they work but they just do. Keep going.
Click to expand...

Have read all you write here. What is the possibility to detect IMEI from WI-FI, mobile, or 4G modem using embeded browser ?
 
extreme404 said:
very hard to create an account for now, almost impossible
Click to expand...

Im generating new IMEI and MOBILE ID on my phone. I hacked it through software ! So I can generate as many as I can with a real SIM CARD and same 4G Carrier Connection !

I know each 4G Modem and Residencial Wi-FI will have the same IMEI. Is possible to detect it knowing your ip ?

Thats the unique prof. that a lots of IG accounts are passing through the same device in a single day !
 
Jibri Wright said:
It depends on the scale in which you're using it and what part of the method you're actually using. This method also heavily dependent on the Android carrier. A lot of carriers will use a device's MAC address to try and give the device the same IP and port as often as possible on a tower(at least in the US). This only changes when the device is in range of another tower. Also putting those extensions on your browser does leave a fingerprint, just not what's thought of in a general sense. Yes it makes your browser harder to fingerprint, but that in itself is a fingerprint. Most users don't try to actively stop their browser from being fingerprinted. It's kinda like going out in public wearing a mask. Yeah no one knows who you are, but you're the only one wearing a mask!

So to answer your question, I believe this method is feasible for one or two accounts a day. But not for making multiple accounts in mass. If you do I'm not sure if the accounts after the first two would last that long.

Also be sure to look up what I mentioned earlier about passive os fingerprinting. There are ways to tell if a device's user agent truly matches with the way it's sending information(the physical packets of data) that can be traced.
Click to expand...
This is pure gold, thanks for The info. Always Wonder about this.
 
Do anyone know a good account created using 4g provider?
Im looking to buy a couple of hundred accounts for client management. Pm me if you have any suggestions, thanks!
 
tadeuonbrand said:
Im generating new IMEI and MOBILE ID on my phone. I hacked it through software ! So I can generate as many as I can with a real SIM CARD and same 4G Carrier Connection !

I know each 4G Modem and Residencial Wi-FI will have the same IMEI. Is possible to detect it knowing your ip ?

Thats the unique prof. that a lots of IG accounts are passing through the same device in a single day !
Click to expand...
IMEI can't be detected through your IP address. The IMEI can only really be accessed when you use the app. So if you're using a browser to make accounts then Instagram has no way of knowing the device's IMEI. This goes for making the account in your phone's browser as well as making the account on your computer's browser using your phone as a hotspot. But see that's the flip side in all this. Finding a way to send Instagram an IMEI drastically raises the trust score of an account. And the only way to do that is through the Instagram app. I might've said too much, but finding ways to use the app without being traced is the name of the game. If you can find a way to do that(and trust me there are ways) you've won the game.

Only after you accomplish that can you truly find bot settings that consistently work. Otherwise you're going to get varied results with your settings and wonder why some settings work on some accounts and not on others. And of course, try to use good proxies. Making an account on any type of proxy that isn't datacenter proxy will give the account a good trust score if you figure out how to do what I've said above. Running accounts on mobile proxies afterwards is the best.
 
Jibri Wright said:
IMEI can't be detected through your IP address. The IMEI can only really be accessed when you use the app. So if you're using a browser to make accounts then Instagram has no way of knowing the device's IMEI. This goes for making the account in your phone's browser as well as making the account on your computer's browser using your phone as a hotspot. But see that's the flip side in all this. Finding a way to send Instagram an IMEI drastically raises the trust score of an account. And the only way to do that is through the Instagram app. I might've said too much, but finding ways to use the app without being traced is the name of the game. If you can find a way to do that(and trust me there are ways) you've won the game.
Click to expand...
Do you sell accounts, DM me if Yes?
 
Jibri Wright said:
IMEI can't be detected through your IP address. The IMEI can only really be accessed when you use the app. So if you're using a browser to make accounts then Instagram has no way of knowing the device's IMEI. This goes for making the account in your phone's browser as well as making the account on your computer's browser using your phone as a hotspot. But see that's the flip side in all this. Finding a way to send Instagram an IMEI drastically raises the trust score of an account. And the only way to do that is through the Instagram app. I might've said too much, but finding ways to use the app without being traced is the name of the game. If you can find a way to do that(and trust me there are ways) you've won the game.

Only after you accomplish that can you truly find bot settings that consistently work. Otherwise you're going to get varied results with your settings and wonder why some settings work on some accounts and not on others. And of course, try to use good proxies. Making an account on any type of proxy that isn't datacenter proxy will give the account a good trust score if you figure out how to do what I've said above. Running accounts on mobile proxies afterwards is the best.
Click to expand...

According to many different places Apple blocks any app developers who want to grab your serial number or IMEI number. This is one example posted on an Apple discussion forum.

https://discussions.apple.com/thread/7574711
 
instashell said:
Do you sell accounts, DM me if Yes?
Click to expand...
I could, but the issue is that there are also things that you can do directly after an account is made to raise the trust score even higher. And this involves posting content(can't give you exact numbers, but the more you post immediately after the better. It's up to you to test and find the threshold). I could make accounts for you, but I honestly haven't tested just letting them sit after making them. It could deprecate the trust score and you'll be right back where you started.
 
mdntblu said:
According to many different places Apple blocks any app developers who want to grab your serial number or IMEI number. This is one example posted on an Apple discussion forum.

https://discussions.apple.com/thread/7574711
Click to expand...
Hmm could you find something more recent that confirms this? This is what Instagram states in it's privacy policy:

Device identifiers:
  • When you use a mobile device like a tablet or phone to access our Service, we may access, collect, monitor, store on your device, and/or remotely store one or more "device identifiers." Device identifiers are small data files or similar data structures stored on or associated with your mobile device, which uniquely identify your mobile device. A device identifier may be data stored in connection with the device hardware, data stored in connection with the device's operating system or other software, or data sent to the device by Instagram.
So maybe the app is looking at the structure of files on your phone to determine device information. Something that definitely would be unique to the app since browsers nowadays typically sandbox themselves from the rest of the device.
 
mdntblu said:
According to many different places Apple blocks any app developers who want to grab your serial number or IMEI number. This is one example posted on an Apple discussion forum.

https://discussions.apple.com/thread/7574711
Click to expand...
So my apologies. I was confusing the IMEI with the Device ID(thought they were the same thing smh:anyway:). A Device ID can be tracked by any app that is downloaded on a device. So Instagram is using that to track devices through the app. I know for a fact that I definitely change this number every time I create an account.

https://www.adjust.com/glossary/device-id/
 
Jibri Wright said:
IMEI can't be detected through your IP address. The IMEI can only really be accessed when you use the app. So if you're using a browser to make accounts then Instagram has no way of knowing the device's IMEI. This goes for making the account in your phone's browser as well as making the account on your computer's browser using your phone as a hotspot. But see that's the flip side in all this. Finding a way to send Instagram an IMEI drastically raises the trust score of an account. And the only way to do that is through the Instagram app. I might've said too much, but finding ways to use the app without being traced is the name of the game. If you can find a way to do that(and trust me there are ways) you've won the game.

Only after you accomplish that can you truly find bot settings that consistently work. Otherwise you're going to get varied results with your settings and wonder why some settings work on some accounts and not on others. And of course, try to use good proxies. Making an account on any type of proxy that isn't datacenter proxy will give the account a good trust score if you figure out how to do what I've said above. Running accounts on mobile proxies afterwards is the best.
Click to expand...

I can generate as many IG I want. I'm trying to figure what will come ahead. If IMEI cant be traced, then what we have to search is subnet / ip ranges that arent hurt by Instagram.

With Instagram and Facebook, to survive the game we need to be ahead of what they are doing or thinking. What will be next pattern block waves, etc. Otherwise we will be on a endless game of cat and rat !

This fucking subnet blocking IP wave is the next war game they are playing now. What will come next to it ? What will evolve ? Probably pic verification, phrishing alerts, scrapping alert activitys, etc.

In the past they are trying to compromise software that make automation. Now they forget that idea and are focusing on network. And network will eliminate everyone that is n00b using automation. Software cant handle that and proxy providers cant manage it too !
 
Last edited:
There are 4G proxy providers that do not force IP rotations every 5-20 minutes which are huge red flags to the bot detection systems. Sure a mobile user driving down a freeway will jump cell towers, but their not changing IPs every few minutes, thus a huge red flag...factor that in with other odd behavior like following 100+ people a day and its a recipe for a ban/block.

Also when accessing a website via mobile there is no way to determine your IMEI or Serial # (only a device ID/fingerprint which is easily changeable) as they are simply not passed during the https transaction and thus there is NO way to obtain it. Apple blocks app developers from obtaining your IMEI & Serial # so using the Instagram app will not provide IG with that info either. Most people creating IG accounts through a proxy are using the website (instagram.com), not the app, granted makes no difference, neither way provides your IMEI or Serial # to IG.

You're going to want to find a provider that has 4G proxies that do not change IP on timed rotation. Most back connect ones do just that. The other problem is non-rotating 4G proxies will be much more expensive.
 
I won’t extend this so much but
You can spoof imeis or even “generate new ones “, unless they really spoof real devices it’s useless because one of IG/FB measures against fraud is checking their databases of IMEIS that already been used to ig or fb.
It’s like you want to use a fake ID against cia/fbi just because you are good with photoshop

Instead of focusing into try to become the shady guy with a mask in the middle of a electro club just fit into and you will be good
Or try to be the shady guy anyone’s spot kilometers afar
Ps
Any method leaked here is literally dead (will be) so choose words carefully
 
tadeuonbrand said:
With Instagram and Facebook, to survive the game we need to be ahead of what they are doing or thinking. What will be next pattern block waves, etc. Otherwise we will be on a endless game of cat and rat !

This fucking subnet blocking IP wave is the next war game they are playing now. What will come next to it ? What will evolve ? Probably pic verification, phrishing alerts, scrapping alert activitys, etc.
Click to expand...

What we do know is that Instagram can't just be going around blocking every single IP from a 4G internet service provider because that would mean that if I actually get on one of those same IP's on my normal IG account my account may become blocked.
 
BrazilianBusinessman said:
I won’t extend this so much but
You can spoof imeis or even “generate new ones “, unless they really spoof real devices it’s useless because one of IG/FB measures against fraud is checking their databases of IMEIS that already been used to ig or fb.
It’s like you want to use a fake ID against cia/fbi just because you are good with photoshop

Instead of focusing into try to become the shady guy with a mask in the middle of a electro club just fit into and you will be good
Or try to be the shady guy anyone’s spot kilometers afar
Ps
Any method leaked here is literally dead (will be) so choose words carefully
Click to expand...

From what I've read on many different websites is IG doesn't have access to IMEI. However I found this useful info regarding this.

https://stackoverflow.com/a/19927516
 
mdntblu said:
There are 4G proxy providers that do not force IP rotations every 5-20 minutes which are huge red flags to the bot detection systems. Sure a mobile user driving down a freeway will jump cell towers, but their not changing IPs every few minutes, thus a huge red flag...factor that in with other odd behavior like following 100+ people a day and its a recipe for a ban/block.

Also when accessing a website via mobile there is no way to determine your IMEI or Serial # (only a device ID/fingerprint which is easily changeable) as they are simply not passed during the https transaction and thus there is NO way to obtain it. Apple blocks app developers from obtaining your IMEI & Serial # so using the Instagram app will not provide IG with that info either. Most people creating IG accounts through a proxy are using the website (instagram.com), not the app, granted makes no difference, neither way provides your IMEI or Serial # to IG.

You're going to want to find a provider that has 4G proxies that do not change IP on timed rotation. Most back connect ones do just that. The other problem is non-rotating 4G proxies will be much more expensive.
Click to expand...

Are you sure rotating is a good ideia?

Imagine this scenario:

Pool of proxies: 10.000
IG automation users tools using that network: 1.200

Same IP with different IG accounts accessing it in a single day or a few packs of days: Surely will reach 1.200 people rotating so many times.
A real user in a day has more or less a max of 5 - 10 ips rotations if he is travelling, restarting mobile, etc.

It is a huge pattern to fuck 4G network !
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top