DNS Leak

Secure DNS

DoH Mode

Set DoH service in browser and setting.

Disable IPv6

Windows

1. Open Control Panel.
2. Go to Network and Sharing Center.
3. Click on Change adapter settings.
4. Right-click on your active network connection (Wi-Fi or Ethernet) and select Properties.
5. In the list of items, uncheck Internet Protocol Version 6 (TCP/IPv6).
6. Click OK to apply the changes.
7. Restart your computer.

MacOS

1. Open System Preferences.
2. Go to Network.
3. Select your active network connection (Wi-Fi or Ethernet) from the left.
4. Click on Advanced.
5. Go to the TCP/IP tab.
6. In the “Configure IPv6” drop-down menu, select Link-local only (or Off, depending on the macOS version).
7. Click OK and then Apply.

Linux

1. Open a terminal window.
2. Run the following commands to disable IPv6 temporarily (for the current session):

sudo sysctl -w net.ipv6.conf.all.disable_ipv6=1
sudo sysctl -w net.ipv6.conf.default.disable_ipv6=1

To disable IPv6 permanently, you can add the following lines to your /etc/sysctl.conf file:

net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1

After editing the file, run:

sudo sysctl -p

Firefox

1. Open about:config
2. Search for network.dns.disableIPv6.
3. Set the value to true to disable IPv6 in Firefox.

Chrome

1. Open chrome://flags
2. Search for “IPv6”.
3. Disable “Experimental QUIC protocol” (QUIC uses IPv6 by default).
4. Restart Chrome.

Windows

Flush DNS Cache

ipconfig /flushdns

MacOS

sudo killall -HUP mDNSResponder

Browser Tracking

Fingerprint

Here’s a table summarizing the potential information that privacy.resistFingerprinting (RFP) may leak or modify, making it detectable by websites:

Firefox

• Open about:config
• Search for privacy.resistFingerprinting
• Double click it set to true
• Then search for dom.event.clipboardevents.enabled
• Double-click Set to false

Brave Browser (with built-in anti-fingerprinting)

• Open brave://settings/shields
• Find the Fingerprinting option. Select Block all fingerprinting

Chrome (experimental feature)

• Open chrome://flags
• Search for Fingerprinting Protection
• Enable this feature and restart your browser

Random fingerprint everyday

• Open about:config
• Set privacy.resistFingerprinting.randomization.daily_reset.enabled to true

CPU Cores

FIrefox

This setting takes effect without turning on privacy.resistFingerprinting

• Open about:config
• Search for dom.maxHardwareConcurrency
• Modify it to the fake cores

WebRTC

Firefox

• Open about:config
• Search for media.peerconnection.enabled
• Double-click it to set it to false
• Restart Firefox

Google Chrome (Chromium, Edge, Brave, Opera)

Chrome does not allow full disabling of WebRTC natively, you can restrict its behavior:

• Open chrome://flags
• Search for WebRTC. Disable the following content. Then restart Chrome.

WebRTC STUN origin header
Anonymize local IPs exposed by WebRTC

If the browser does not support this function, install the official google plugin WebRTC Network Limiter .

Linux-based Browsers (Brave, Chromium, Edge, etc.)

• Open chrome://settings/content/webrtc
• Set “WebRTC IP Handling Policy“ to “Disable non-proxied UDP“.

WebGL

Firefox

• Open about:config
• Search for webgl.disabled
• Double click it set to true

Cross-Site Tracking

• Open about:config
• Search for network.http.referer.XOriginPolicy
• Modify the number to 2

UserAgent

==With current fingerprint recognition technology, most disguises will be recognized as machine.==

Modify the useragent manually.

• Open about:config
• Search for general.useragent.override
• Choose String type and set the appropriate useragent

Format:

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:135.0) Gecko/20100101 Firefox/135.0

Explanation:

• Mozilla/5.0 → Standard prefix for modern browsers.
• Windows NT 10.0; Win64; x64 → Represents Windows 10/11 (64-bit).
• rv:135.0 → Gecko rendering engine version 135.0 (matches Firefox version).
• Gecko/20100101 → A fixed identifier for Gecko-based browsers.
• Firefox/135.0 → Indicates the browser version.

Time Zone

The following can be recognized as time zones to determine whether or not they are forged.

ip time zone
Javascript time zone
Internationalization API time zone
time zone offset
local time

Keyboard Fingerprint

Protect keyboard Fingerprint by plugin.

Etag Tracking

Disable Browser Caching (Prevents ETags from being stored)

In Firefox, set:

about:config → browser.cache.disk.enable = false
about:config → browser.cache.memory.enable = false

In Chrome, use the “Disable Cache” option in DevTools (F12 → Network Tab → Disable Cache).

Use a Privacy-Focused Browser

• Tor Browser & Brave automatically block ETag tracking.

Block ETags with Browser Extensions

• uBlock Origin: Add a custom rule to block ETag headers:

Clear Cache Regularly

• Use private browsing mode or manually clear the cache after each session.

Use a VPN / Proxy

• ETags may still track browser sessions, but changing IPs frequently makes tracking harder.

Modify Headers with Extensions

• Use Chameleon or Header Editor extensions to strip If-None-Match headers from requests.

Tor Browser

When you use Tor Browser, it standardizes or falsifies several types of information to protect your privacy. Here’s a more detailed list of the information Tor falsifies or standardizes:

Fake Canvas Fingerprints

Use the following plugin to fake Canvas fingerprint requests. Don’t disable canvasprint in your browser.

• CanvasBlocker (Firefox) – Blocks or modifies canvas fingerprinting.
• Trace (Chrome & Firefox) – Provides multiple fingerprinting protections.

CanvasBlocker

Ignored APIs Setting

• DO NOT ignore canvas (let CanvasBlocker spoof it).
• DO NOT ignore audio (audio fingerprinting is common).
• DO NOT ignore domRect (some sites use it for fingerprinting).
• DO NOT ignore navigator (spoofing prevents easy tracking).
• IGNORE history (not needed, Firefox already protects it).
• IGNORE window (not a major tracking method).
• IGNORE svg & textMetrics (less commonly used).
• IGNORE screen (not as critical if you’re already spoofing navigator).

Ignored APIS Settings (Recommandation)

• canvas (DO NOT IGNORE – let CanvasBlocker spoof it).
• audio (DO NOT IGNORE – prevents audio fingerprinting).
• history (IGNORE – Firefox blocks most tracking here).
• window (IGNORE – rarely used for tracking).
• domRect (DO NOT IGNORE – some fingerprint scripts use it).
• svg (IGNORE – minor impact).
• textMetrics (IGNORE – minor impact).
• navigator (DO NOT IGNORE – important for spoofing).
• screen (IGNORE – less critical than navigator).

CanvasBlocker configuration json

Bot Detection

Identification and Bot Detection

The combination of fingerprinting and bot detection gives you a powerful tool to protect against online fraud and produces the best results when used together.

WebDriver
WebDriver Advance
Selenium
NightmareJS
PhantomJS
Awesomium
Cef
CefSharp
Coaches
FMiner
Born
Phantomas
Rhino
Webdriverio
Headless Chrome

Chrome DevTools Protocol Detection

Detectable use of developer tools to simulate browsers or control them via related developer protocols.

CDP

Native Navigator

Detect whether the Navigator is deceptive. Some browser plug-ins or robots will modify key attributes to achieve deception.

appVersion: 5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36
deviceMemory: 8
hardwareConcurrency: 4
maxTouchPoints: 0
mimeTypes: "[object MimeTypeArray]"
plugins: "[object PluginArray]"
productSub: 20030107
userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36
vendor: Google Inc.
language: en-US
languages: [ "en-US", "en" ]
javaEnabled: function javaEnabled() { [native code] }
getGamepads: function getGamepads() { [native code] }
requestMIDIAccess: function requestMIDIAccess() { [native code] }
mozGetUserMedia: function mozGetUserMedia() { [native code] }
sendBeacon: function sendBeacon() { [native code] }
requestMediaKeySystemAccess: function requestMediaKeySystemAccess() { [native code] }
getAutoplayPolicy: function getAutoplayPolicy() { [native code] }
registerProtocolHandler: function registerProtocolHandler() { [native code] }
taintEnabled: function taintEnabled() { [native code] }
permissions: "[object Permissions]"
pdfViewerEnabled: true
doNotTrack: 1
mediaCapabilities: "[object MediaCapabilities]"
vendorSub: 
cookieEnabled: true
mediaDevices: "[object MediaDevices]"
serviceWorker: "[object ServiceWorkerContainer]"
credentials: "[object CredentialsContainer]"
clipboard: "[object Clipboard]"
mediaSession: "[object MediaSession]"
userActivation: "[object UserActivation]"
wakeLock: "[object WakeLock]"
globalPrivacyControl: true
webdriver: false
geolocation: "[object Geolocation]"
appCodeName: Mozilla
appName: Netscape
platform: Win32
product: Gecko
locks: "[object LockManager]"
onLine: true
storage: "[object StorageManager]"
constructor: function Navigator() { [native code] }
duckduckgo: { "platform": "extension" }
toString: function toString() { [native code] }
toLocaleString: function toLocaleString() { [native code] }
valueOf: function valueOf() { [native code] }
isPrototypeOf: function isPrototypeOf() { [native code] }
propertyIsEnumerable: function propertyIsEnumerable() { [native code] }
__defineGetter__: function __defineGetter__() { [native code] }
__defineSetter__: function __defineSetter__() { [native code] }
__lookupGetter__: function __lookupGetter__() { [native code] }
__lookupSetter__: function __lookupSetter__() { [native code] }

Webdriver