VPN vs proxy vs Tor: how each hides traffic and how detection tells them apart
VPN vs proxy vs Tor: how each hides traffic, what each one still reveals, and how a detection layer tells them apart at the network level.
Blog / Network signals
Network signals
iCloud Private Relay: what it is, and what it means for fraud detection
iCloud Private Relay hides a Safari user's IP, but Apple publishes its egress ranges, so it is identifiable. What it is and how to read it for fraud.
IP fraud scores explained: Talos, Scamalytics, and IPQS
What an IP fraud score means, how Talos, Scamalytics, and IPQS calculate it, why yours can be high through no fault of your own, and what a score misses.
How to detect geolocation spoofing and prevent fraud
How to detect geolocation spoofing: how it works, why a single IP check fails, and how layered signals expose the mismatch so your team can prevent fraud.
Will iCloud Private Relay and Chrome IP Protection break your fraud detection?
What iCloud Private Relay and Chrome IP Protection actually change for fraud detection: what degrades, what survives, and why masking is not evasion.
What is TLS fingerprinting? How JA3 and JA4 identify a client
TLS fingerprinting identifies the software behind a connection from its TLS handshake. How it works, what JA3 and JA4 are, and what it reveals.
What is WebRTC fingerprinting? How it reveals a real IP behind a VPN
WebRTC fingerprinting uses a browser's real-time connection setup to expose network data, including a local or real IP behind a VPN. How it works.
What IP reputation is, and why an IP score alone won't catch fraud
What IP reputation is, how the 0 to 100 score is built, and why a clean IP score alone will not catch fraud. The lagging, shared, and recycled-IP problem.
JA4 fingerprinting explained: how it improves on JA3, and what it actually identifies
What JA4 fingerprinting is, how it fixes JA3's weakness to TLS randomization, the JA4 string format and JA4+ suite, and what it can and cannot identify.
Proxy detection for fraud prevention: how to identify hidden traffic sources
How proxy detection works for fraud prevention: 13 techniques, why residential proxies are hard to spot, and why an IP check alone is never enough.