Antoine is currently the Head of Research at Castle. In this role, he focuses on improving Castle's bot detection engine using different approaches, including behavioral detection, and fingerprinting.
In this blog post, we study the Spotify-Account-Checker open source project. The author describes it as: “An automated
At first glance, an email address ending in .eu.org looks trustworthy. It feels institutional, maybe even official. Many people
In my previous post, I showed how LinkedIn detects browser extensions as part of its client-side fingerprinting strategy. That
Modern bot detection rarely deals with obviously fake browsers. Most large-scale automation today runs inside browser instances, with patched
In fraud and bot detection, people usually think of fingerprinting as the classic browser or device fingerprint. This comes from
Every month, we publish a snapshot of the email domains most actively used in fake account creation and related abuse
If you have been following this series (post 1 and post 2), you know the ritual by now. I buy
![Investigating tinyhost[.]shop: a disposable email API used for large-scale fake account creation](https://storage.ghost.io/c/30/2d/302db284-6a98-4af6-9641-fe1ecf757b23/content/images/size/w960/format/webp/2025/12/image--15-.webp)
While working on a new customer, we identified a burst of automated activity linked to accounts created before Castle protections
A few months ago, I accidentally bought sneaker proxies. Instead of crying over my mistake, I did what any reasonable
If you landed here after searching for something like “browser fingerprint test”, “bot detection API”, or “Kameleo anti-detect browser”
Every month, we publish a snapshot of the email domains most actively used in fake account creation and related abuse
We recently detected and blocked a large-scale fake account creation campaign. The attacker attempted to register tens of thousands
