(untitled)

How do you make fake/anonymous accounts on botnet websites without soykaf pic related happening? Really frustrating That was a rhetorical question, really I made this thread to vent about this.

I'm pretty sure they know a lot of soykaf to extrapolate the current user, things like keystrike wpm gives away how good you're at using computers, browser cookies, browsers, cross-browsers/cookies/times if you use many but with one IP, browser fingerprints. I've also heard if you made two or more new accounts with the same IP it would trigger that soykaf in the OP.

>>12175 > Upload a photo ID Top JeJ. As if any sane person would send copies of their official ID documents over the Internet. This also happened to me a couple of years ago because I put fake information into the address and last name fields. There is still about $30 USD in my account which they are still holding ransom. To be fair though, since PayPal is regarded as a bank and needs this kind of information for genuine purposes (transaction tracing, verification etc - although it is probably being misused for other purposes too), it is not surprising that they require it. However, I think their service is very misleading because most people are probably not aware what they are signing up for.

>I'm pretty sure they know a lot of soykaf to extrapolate the current user, things like keystrike wpm gives away how good you're at using computers, browser cookies, browsers, cross-browsers/cookies/times if you use many but with one IP, browser fingerprints. these can all be spoofed to varying degrees. IP is the one that's hardest to change and probably trips these kinds of "spam protection" things the most, however it's also the one that is least reliable at uniquely identifying users since so many IP addresses are shared.

just comply with fake docs. it won't work most of the time but you can keep trying. it only needs to work once. or just don't use botnet. i trust your judgement op.

>>12203 >soykaf://popularsocial >if popularsocial is country XX , give differentIP much like how having european ip/proxy and/or dns sends you to the 'cookie law' version, BGP decides it >sometimes differentIP belongs to your ISP subnet to make pings faster or generally just make it faster. The popularsocial can afford lots of servers for each country and its every ISPs. >??? >isp have dst logs from router AND logs from differentIP belonging to same isp Shared/cgnat isn't cloak anymore.

>>12203 >probably trips these kinds of "spam protection" things the most anecdotally, i haven't found this to be true. it's a contributor, sure, but so are a ton of other things. on facebook at least it seems like trying to make multiple accounts in quick succession on the same IP can trip the filter, but it's not like you can get your IP blacklisted. the thing to understand here is behind the scenes you essentially have a neural network assigning every account a "spammer likelyhood" score based on an aggregation of all information (or lack thereof) that the website or app is able to collect on you. you can't really outsmart it analytically, you just have to gain intuition through experience and try different things until it works.

Major red flags are shared IP addresses and the use of an email provider that doesn't do any user verification (e.g. cock.li). Either of these is often enough for a service to require an SMS verification for "security" reasons. The single best thing you can do to blend in is get an anonymous phone and use that to sign up for Google and Facebook accounts and then use all three to sign up for whatever you're actually interested in. The second best thing would be hacking someone else's wifi and using their Internet connection. You are being treated like a criminal and the only way around it is to behave like a criminal. I don't have any experience with anonymous accounts with financial service companies but they have some pretty serious KYC requirements. Requiring a photo ID is not uncommon when you're considered risky (e.g. a crypto exchange that accepts credit cards).

>>12223 >anonymous phone and use that to sign up for Google and Facebook accounts you don't need a phone number for these. google is easy because you can use the android vm trick, which is pretty foolproof (100% success rate for me, through 6 or so accounts). facebook is a lot more frustrating but it isn't a firm requirement if you are persistent.

>>12216 >google is easy because you can use the android vm trick Then you're tethered to one ip, switching will trigger a prompt for a phone number

>>12238 this has never happened to me with google accounts. it might prompt you but you can just skip it. unfortunately you need a phone number to make use of google voice though.

>>12175 >>12202 Yes, Paypal is required by KYC/AML laws to do this, which makes it a slightly different flavor of botnet than say Twitter or Discord. It also means they'll be more strict about verifying whatever you put down. When you think about, USD itself is kind of a botnet. You're really not allowed to use it in significant quantities without going through identity verification. You're not allowed to use it in certain ways, e.g. sending it to Iran. If you want to avoid this type of botnet you will need to act like an illegal immigrant -- cash everywhere offline, prepaid cards and gift cards bought with cash online. Plus Monero.

>>12256 >If you want to avoid this type of botnet you will need to act like an illegal immigrant -- cash everywhere offline, prepaid cards and gift cards bought with cash online. Plus Monero. This. The reality is that there are lots of people out there who for one reason or another don't have a reliable phone number, a bank account, a credit card, or even an ID (not just illegal immigrants either, plenty of people who live in cities with no need for a drivers license haven't bothered getting a state ID card). There are systems in place to accommodate for these people, it's just a matter of identifying them. Mostly it comes down to buying prepaid "gift cards" whenever you need to pay with a card, and looking at the alternate forms of identification that are sometimes available in place of a government ID.

>>12257 >looking at the alternative forms of identification that are sometimes available in place of a government id Kinda like how some services would let you use mail wiith your name on it in the past, which was easy to fake. I wouldn' t know if Paypal would allow this, but I'm pretty sure they wouldn't.

>>12262 Basically anything that requires a SSN (bank account, credit card, loan, etc.) will be much harder to avoid giving up your real dox. Paypal, venmo, cashapp, etc. are kind of on the fringe because they're somewhat regulated (because they deal with money) but afaik aren't covered by the same laws as banks. Still, getting a fake paypal is certainly a lot harder than a fake facebook account or whatever. Lots of services still accept mail, either in place of or in addition to other documents. Even the DMV will take it as a proof of residency (I used a literal screenshot of my bank statement to get my drivers license transferred to a different state because I didn't have current utility bills yet).

>>12185 Creating IP addresses from one accuont seems like a no brainer of what not to do IMO, but sometimes even just using incognito mode will do the trick to trick a service. Having said that I don't like to deal with the big services.

>>12185 Also on that I do find using heuristics interesting. Along those lines things like using Dale Chale to measure a user's intelligence is an interesting proposition.

>>12175 This only sums up to two possibilities: 1) Some soykafty automation algorithm decided you're acting like a bot. In such cases, usually it's your fault using a browsers with fingerprint spoofing such as canvas poisoning. Most websites and even devices nowadays use some kind of fingerprinting like how payment processors right now fails to open an app if your device uses a customized boot loader. Just use a plain firefox or brave and don't click on bunch of soykaf when using payment processors. Keep in mind websites don't need a client-side tracking js to know what you had been up to as they use a spam/bot/abuse/lists generated by services similar to captcha. 2) There's a suspicion that had led them to think you are about to do or had done something illegal that would get them into trouble or it was out of suspicion that their machine learned from past inputs where you just so happen to align with the actions of similar abusers. Most online services had implement CIB (Coordinated inauthentic behavior) detections around 2015+. Either they want your identification for legal purposes, or they're just doing it to make people more scared of abusing their services thus avoiding trouble. >>12202 Most payment processing apps right now even require a 180 degree front and both side views of you while holding a huge piece of paper with your name written although sometimes that's optional. >>12599 >but sometimes even just using incognito mode will do the trick to trick a service. Having said that I don't like to deal with the big services. Well this isn't year 2014> anymore. CIB.

Do it like the carders: clean proxies + FraudFox/antidetect

>>12877 Why would someone trying to anonymize themselves use windows? That seems counter intuitive.

Avoid using a user agent swittcher in a time based switching mode because many sites these days apparently mistake it for having your account hijacked seeing your logged in session change browser and operating system information repeatedly. I do wonder if sites like Facebook let you unlock your account if you originally registered with your real name and only made it fake later or if they count it same as registering with a fake name.

>>12878 Blending in, run a vm

>>12175 Font seems like it's windows. Either it's because you used different browsers to log in or was experimenting opsec on your very browser. If I were you, just leave your normal user accounts on a windows install and keep on using that device for eternity. Sometimes, just changing your user agent can cause hcaptcha/recaptcha to block you off or by logging in to another device whose metadata fingerprints had been "flagged" as "enthusiast" (your hardened device) causing your other paypal account to get flagged since they think it got hacked. It's a security measure which involves fingerprinting so that's probably the case, it's not that bad for average user perspective.

try to get the patriot act repealed

>>12609 >payment processors right now fails to open an app if your device uses a customized boot loader wait, is this real? is hardware monitoring enforcement this bad?

>>12882 >I do wonder if sites like Facebook let you unlock your account if you originally registered with your real name and only made it fake later or if they count it same as registering with a fake name. i had an email that I made when I as a teenager with real name (for work) but fake birthday. I needed to get into it, and it would not let me without guessing all the information correctly, but when I went to recover, it asked me questions like "what zip code was the account created in" implying the ip address was used to generate location data tied to the account at creation. Unfortunately, I think I was using a VPN at a university at the time so I was unable to recover the account. I have tried to create multiple fake accounts recently, but it seems like everyone now requires an authentic phone number for 2 part authentication. I wanted to create a gmail/facebook because most content that I need access to is behind a login screen, but there are no real good ways outside of paying for a fake SMS service that I can use to create a fake account. Any advice on bypassing phone authentication for facebook/gmail account creation?

>>12175 Thispersondoesnotexist maybe?

>>13998 >Any advice on bypassing phone authentication for facebook/gmail account creation? Gmail is trivial if you have an android phone or can run android in a VM. When you do the initial device setup it will ask you to sign into your gmail account and there's an option to create one. It'll then ask you for a phone number, which you can skip. After that you can don't need the phone any more and can wipe the install. You don't even need a dedicated phone for this, as android devices allow for multiple user profiles, but you would need to have google play services installed. Facebook in my experience can be overcome with persistence. You don't need a phone number necessarily. There are some things that instantly trigger the spam filter like using throwaway email addresses, but if you behave like a normal person and gradually add more and more friends, making sure that these people actually accept you, as getting rejected will flag you as a spammer. As for how you accomplish that, using a girl as your profile pic and a feminine or neutral name helps immensely. Just add horny men from India and the Philippines. You can find them in international chat/pen pal groups. Catfishing them will also help keep you from being derezzed, as I'm sure messenger activity plays into whatever score is being kept behind the scenes. Join groups but not too many at once. If it fails just roll a new account and start over. If you get the ID verify thing don't give up, it's not actually a bad thing. If you can pass it in my experience Facebook seems to mark your account as "verified" and you'll get much more lax treatment from that point on. Just shop a fake ID. The visual quality of the fake doesn't actually seem to matter that much, but I suspect the image metadata does matter because the system is highly automated behind the scenes, so strip the exif headers and make sure the resolution is believable for a cell phone cam. Maybe transcode it with slightly heavy compression to hide the kinds of photoshop tells that an automated system could pick up.

>>12223 >Either of these is often enough for a service to require an SMS verification for "security" reasons. For a fact it automatically connects your contacts like i just need a verification code then outta nowhere i see my co-wrokers, HS friends, colleagues, etc for fuarrrks sakes & they got the technology to detect if it's a textnow, textfree number lmfao

there are services that allow you to buy SMS lines for pretty cheap. Callcentric has a good one. AFAIK it's a legit phone number so you can use it for signing up to whatever you want.

Stop calling everything a fuarrrking botnet.

>>14090 by exposure alone, the word's really starting to lose all meaning to me.