Research
·
Fraudulent email domain tracker: November 2025
Every month, we publish a snapshot of the email domains most actively used in fake account creation and related abuse
Latest — page 3
Research
·
330 custom email domains, and what this tells us about how attackers build infrastructure for fake account creation
We recently detected and blocked a large-scale fake account creation campaign. The attacker attempted to register tens of thousands
Research
·
When canvas lies: handling randomized fingerprints in fraud detection
Why canvas fingerprinting matters in fraud detection Canvas fingerprinting is often presented as a textbook example of browser fingerprinting. The
Research
·
Is Puppeteer stealth dead? Not yet, but its best days are over
A few years ago, Puppeteer stealth was one of the most popular tools in the automation and scraping ecosystem. Built
Research
·
Fraudulent email domain tracker: October 2025
This is the seventh edition of our monthly tracker highlighting email domains linked to fraudulent activity. Just like in September&
Research
·
How to detect disposable email domains without relying on 3rd party APIs and lists
To scale a fraud or bot attack, adversaries need more than just realistic automation. They need infrastructure. A convincing browser
Research
·
Roll your own bot detection: server-side detection (part 2)
This is the second part of our series on building a lightweight, vendor-free anti-bot system to protect your
Research
·
Roll your own bot detection: fingerprinting/JavaScript (part 1)
This is the first article in a two-part series (new: 2nd article was published) where we show how to
Research
·
Fraudulent email domain tracker: September 2025
This is the sixth edition of our monthly tracker highlighting email domains linked to fraudulent activity. Just like in August&
Research
·
Deep dive: how navigator.deviceMemory can be used for fingerprinting and bot detection
Important update: This article reflects the behavior of navigator.deviceMemory before Chrome’s recent Device Memory API update. New Chrome
Research
·
How we detected a CAPTCHA solver in the wild, and what it says about bot defenses
CAPTCHAs are everywhere, and almost universally hated. Whether it's deciphering blurry text or clicking every fire hydrant in
Research
·
Why a classic CDP bot detection signal suddenly stopped working (and nobody noticed)
Over the past few years, I’ve written a lot about detecting automated browsers by exploiting side effects from the