Whole Antidetect Catalog Donut Browser

Catalogue · State

Anti-detect tools still shipping

ACTIVE · 127

Pushed to within 90 days of the field check, not archived, and answering on the listed URL. This is the only state that means safe to start something new on today.


The rule that sets it, second edition: pushed within 90 days of the field check.

Moved from 180. Detection vendors ship faster than that, so a six-month-old evasion is not current. All thresholds and the endpoints they read

Across sections: 01 13 · 02 9 · 03 21 · 04 13 · 05 22 · 06 5 · 07 12 · 08 8 · 09 12 · 10 12

LicenceMPL-2.0
Pushed2026-08-12
Releasev152.0.4-beta.28 · 2026-07-19
Stars11.1k
StateACTIVE
Silent2 d

Camoufox

ACTIVE

Anti-detect Firefox fork that patches fingerprint surfaces at the C++ level rather than injecting JavaScript.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-12 — 2 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-12
archivedfalse
latest_releasev152.0.4-beta.28 · 2026-07-19
license.spdx_idMPL-2.0
stargazers_count11100
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/daijro/camoufox

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

Engine-level patching is the reason this one keeps working when JS-patch stacks stop. The beta tag has been the shipping tag for months; read that as a release policy, not as instability. — ED.

See also · superseded by · alternatives

LicenceMIT
Pushed2026-08-08
Release151.0.7922.47 · 2026-08-06
Stars2.6k
StateACTIVE
Silent6 d

BotBrowser

ACTIVE

Chromium core with a unified fingerprint defence aimed at Cloudflare, Akamai, Kasada, DataDome and PerimeterX.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-08 — 6 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-08
archivedfalse
latest_release151.0.7922.47 · 2026-08-06
license.spdx_idMIT
stargazers_count2600
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/botswin/BotBrowser

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

The vendor list in its README is a claim about vendors, not a measurement of them. This catalogue records that the claim is made; it does not repeat it as a result. — ED.

See also · superseded by · alternatives

LicenceAGPL-3.0
Pushed2026-08-12
Releasev0.29.3 · 2026-08-12
Stars3.6k
StateACTIVE
Silent2 d

Donut Browser

ACTIVE

Anti-detect browser and profile manager. Ships the Wayfern Chromium fork, which spoofs at the engine level over CDP rather than by patching JavaScript, plus a local REST API and MCP server on the user's own machine.

Download — macOS · Windows · Linux · Nix

curl -fsSL https://donutbrowser.com/install.sh | sh

Homebrew cask donut · deb/rpm/AppImage · APT and RPM repos at repo.donutbrowser.com · Nix flake. Desktop only. Source, AGPL-3.0

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-12 — 2 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-12
archivedfalse
latest_releasev0.29.3 · 2026-08-12
license.spdx_idAGPL-3.0
stargazers_count3600
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/zhom/donutbrowser

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

Both halves are in the repo — the desktop app and the sync server — under AGPL-3.0, and a grep of src/, src-tauri/src and the manifests finds no analytics SDK. Twelve releases between 2026-03-24 and 2026-08-12. Its README's claim about not being detected by named vendors is unsupported by anything in that repo; ignore it and judge the fields. — ED.

See also · superseded by · alternatives

LicenceBSD-3-Clause
Pushed2026-08-12
Release—
Stars27.4k
StateACTIVE
Silent2 d

ungoogled-chromium

ACTIVE

Chromium with Google integration and telemetry removed. Not an anti-detect build — a clean base to start from.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-12 — 2 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-12
archivedfalse
latest_release—
license.spdx_idBSD-3-Clause
stargazers_count27400
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/ungoogled-software/ungoogled-chromium

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceMPL-2.0
Pushed2026-08-14
Release—
Stars23.3k
StateACTIVE
Silent0 d

Brave Browser

ACTIVE

Ships farbling: randomised per-session noise on canvas, audio and WebGL readouts, as a shipped consumer default.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-14 — 0 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-14
archivedfalse
latest_release—
license.spdx_idMPL-2.0
stargazers_count23300
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/brave/brave-browser

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceNO LICENCE DECLARED
Pushed2026-07-23
Release—
Stars2.5k
StateACTIVE
Silent22 d

Mullvad Browser

ACTIVE

Tor-Browser-derived hardened Firefox pursuing one fingerprint for all users rather than a unique one per user.

No licence declared

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-23 — 22 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-23
archivedfalse
latest_release—
license.spdx_idnull (none declared)
stargazers_count2500
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/mullvad/mullvad-browser

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

No SPDX identifier is declared on the repository; the upstream it derives from is MPL. That is inference, not a field, so the licence column stays empty. — ED.

See also · superseded by · alternatives

LicenceFLOSS
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Tor Browser

ACTIVE

The reference implementation of fingerprint uniformity: every user is meant to present the same values.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.torproject.org/download/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Tor Browser fingerprinting protections

ACTIVE

The canonical explainer for the uniform-fingerprint defence model, from the project that invented it.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://support.torproject.org/tor-browser/features/fingerprinting-protections/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceMPL-2.0
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

LibreWolf

ACTIVE

Firefox fork shipping resistFingerprinting on by default, with the build recipes on Codeberg.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://librewolf.net/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceMIT
Pushed2026-08-10
Release—
Stars12.8k
StateACTIVE
Silent4 d

arkenfox/user.js

ACTIVE

The reference hardened Firefox user.js, and the most careful public writing on what resistFingerprinting actually does.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-10 — 4 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-10
archivedfalse
latest_release—
license.spdx_idMIT
stargazers_count12800
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/arkenfox/user.js

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceMIT
Pushed— ¹
Releasechromium-v150…-pro · 2026-08-11
Stars30k
StateACTIVE
Silent3 d

CloakBrowser

ACTIVE

Chromium-based anti-detect browser with a free build and a licence-gated -pro build.

Verify independently — 30k stars since 2026-02-22 is 173 a day, over the 25/day threshold printed in the rubric.

Repository under one year old · Vendor-operated · Licence-key gated build

Source

Evidence

Why ACTIVE: latest_release.published_at = 2026-08-11 (pushed_at not captured; release date stands in) — 3 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at—
archivedfalse
latest_releasechromium-v150…-pro · 2026-08-11
license.spdx_idMIT
stargazers_count30000
created_at2026-02-22
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/CloakHQ/CloakBrowser

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

Thirty thousand stars on a repository created 2026-02-22 is 173 stars a day sustained across six months. The release history is genuine and the contributor count is real; the star curve is the part this catalogue will not vouch for. Verify independently before you build a pipeline on it. — ED.

LicenceMIT
Pushed— ¹
Releasev0.1.10 · 2026-06-21
Stars638
StateACTIVE
Silent54 d

ShardBrowser

ACTIVE

Anti-detect browser published by the ProxyShard proxy vendor.

Repository under one year old · Vendor-operated

Source

Evidence

Why ACTIVE: latest_release.published_at = 2026-06-21 (pushed_at not captured; release date stands in) — 54 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at—
archivedfalse
latest_releasev0.1.10 · 2026-06-21
license.spdx_idMIT
stargazers_count638
created_at2026-05-30
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/ProxyShard/ShardBrowser

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceBSD-3-Clause
Pushed2026-08-13
Release—
Stars75
StateACTIVE
Silent1 d

clearcote-browser

ACTIVE

Young Chromium-based anti-detect build; commit history references licence-key gating.

Repository under one year old · Vendor-operated · Licence-key gated build

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-13 — 1 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-13
archivedfalse
latest_release—
license.spdx_idBSD-3-Clause
stargazers_count75
created_at2026-06-15
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/clearcotelabs/clearcote-browser

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceApache-2.0
Pushed2026-08-05
Releasev1.61.1 · 2026-06-23
Stars4.1k
StateACTIVE
Silent9 d

Patchright (Node)

ACTIVE

Undetected Playwright: patches Runtime.enable and the other CDP leaks that give a driven browser away.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-05 — 9 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-05
archivedfalse
latest_releasev1.61.1 · 2026-06-23
license.spdx_idApache-2.0
stargazers_count4100
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/Kaliiiiiiiiii-Vinyzu/patchright

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceApache-2.0
Pushed2026-08-09
Release—
Stars1.5k
StateACTIVE
Silent5 d

Patchright (Python)

ACTIVE

Python build of Patchright, tracking the Node package's patch set.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-09 — 5 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-09
archivedfalse
latest_release—
license.spdx_idApache-2.0
stargazers_count1500
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/Kaliiiiiiiiii-Vinyzu/patchright-python

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceMIT
Pushed2026-08-14
Releasev4.51.12 · 2026-08-10
Stars12.9k
StateACTIVE
Silent0 d

SeleniumBase (UC Mode)

ACTIVE

A test framework whose undetected mode is maintained on the same cadence as the rest of it — which is the unusual part.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-14 — 0 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-14
archivedfalse
latest_releasev4.51.12 · 2026-08-10
license.spdx_idMIT
stargazers_count12900
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/seleniumbase/SeleniumBase

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceGPL-3.0
Pushed2026-07-15
Release—
Stars1k
StateACTIVE
Silent30 d

Botright

ACTIVE

Playwright-based stealth framework bundling captcha solving.

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-15 — 30 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-15
archivedfalse
latest_release—
license.spdx_idGPL-3.0
stargazers_count1000
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/Vinyzu/Botright

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceNOASSERTION
Pushed2026-07-22
Release—
Stars12.3k
StateACTIVE
Silent23 d

DrissionPage

ACTIVE

Python automation that merges an HTTP client and CDP control behind one API.

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-22 — 23 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-22
archivedfalse
latest_release—
license.spdx_idNOASSERTION
stargazers_count12300
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/g1879/DrissionPage

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceMIT
Pushed2026-07-16
Release—
Stars15.2k
StateACTIVE
Silent29 d

FlareSolverr

ACTIVE

Proxy server that solves Cloudflare's interstitial challenges and hands back the cookies.

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-16 — 29 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-16
archivedfalse
latest_release—
license.spdx_idMIT
stargazers_count15200
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/FlareSolverr/FlareSolverr

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceMIT
Pushed2026-08-13
Release—
Stars2.5k
StateACTIVE
Silent1 d

CloudflareBypassForScraping

ACTIVE

DrissionPage-based Turnstile bypass, maintained against Cloudflare's changes rather than published once.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-13 — 1 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-13
archivedfalse
latest_release—
license.spdx_idMIT
stargazers_count2500
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/sarperavci/CloudflareBypassForScraping

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceMIT
Pushed2026-08-11
Release—
Stars1.6k
StateACTIVE
Silent3 d

ghost-cursor

ACTIVE

Human-like Bézier mouse movement for Puppeteer, still maintained.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-11 — 3 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-11
archivedfalse
latest_release—
license.spdx_idMIT
stargazers_count1600
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/Xetera/ghost-cursor

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceApache-2.0
Pushed2026-08-06
Releasev2.1.88 · 2026-08-05
Stars2.6k
StateACTIVE
Silent8 d

fingerprint-suite (Apify)

ACTIVE

Fingerprint generator plus injector, maintained by a scraping platform that has to keep it working.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-06 — 8 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-06
archivedfalse
latest_releasev2.1.88 · 2026-08-05
license.spdx_idApache-2.0
stargazers_count2600
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/apify/fingerprint-suite

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

CreepJS (live)

ACTIVE

The most thorough public fingerprint and lie-detection suite. Not a score — a list of the places your browser contradicts itself.

Repository

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://abrahamjuliot.github.io/creepjs/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

CreepJS worker tests

ACTIVE

Worker-scope consistency checks: the same questions asked from a context most spoofing stacks forget to patch.

Repository

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://abrahamjuliot.github.io/creepjs/tests/workers.html

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

BrowserLeaks

ACTIVE

One page per surface — canvas, WebGL, fonts, WebRTC — with the raw values rather than a verdict.

https://browserleaks.com/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://browserleaks.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

BrowserLeaks TLS

ACTIVE

JA3 and JA4 plus the full handshake, which is the half of your fingerprint JavaScript cannot change.

https://tls.browserleaks.com/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://tls.browserleaks.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

AmIUnique

ACTIVE

Research-backed uniqueness checker from INRIA, and the rare case where the population behind the number is documented.

https://amiunique.org/fingerprint — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://amiunique.org/fingerprint

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

bot.sannysoft

ACTIVE

The canonical red-green grid for headless and automation tells. Old, small, and still the first thing everyone runs.

https://bot.sannysoft.com/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://bot.sannysoft.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Pixelscan

ACTIVE

Consistency scanner: checks whether IP, timezone and fingerprint tell the same story.

https://pixelscan.net/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://pixelscan.net/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

IPHey

ACTIVE

Trustworthiness scan across browser, hardware, software and IP.

https://iphey.com/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://iphey.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

BrowserScan

ACTIVE

Fingerprint plus bot-detection scoring, with the formula undisclosed.

https://www.browserscan.net/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.browserscan.net/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Fingerprint Playground

ACTIVE

Live demo of the commercial Fingerprint Pro identifier — useful as the detection side's own reference output.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://demo.fingerprint.com/playground

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

EFF Cover Your Tracks

ACTIVE

Successor to Panopticlick. Measures entropy against a corpus it publishes the methodology for.

https://coveryourtracks.eff.org/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://coveryourtracks.eff.org/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Device and Browser Info

ACTIVE

Large public attribute dump with machine-readable APIs beside it.

https://deviceandbrowserinfo.com/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://deviceandbrowserinfo.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

TrackMe / peet.ws

ACTIVE

One JSON document containing your TLS, JA3, JA4, HTTP/2 and header fingerprints. The fastest way to see what you look like below the browser.

https://tls.peet.ws/api/all — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://tls.peet.ws/api/all

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Rebrowser bot detector

ACTIVE

CDP-leak-focused tests — Runtime.enable and friends — rather than the usual navigator property grid.

https://bot-detector.rebrowser.net/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://bot-detector.rebrowser.net/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

nowsecure.nl

ACTIVE

A long-standing live Cloudflare challenge target, kept up specifically to be challenged.

https://nowsecure.nl/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://nowsecure.nl/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

WebBrowserTools

ACTIVE

Grab-bag of individual surface tests, useful when you need exactly one of them isolated.

https://webbrowsertools.com/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://webbrowsertools.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Scrapfly Browser Fingerprint

ACTIVE

Vendor-run browser fingerprint inspector.

https://scrapfly.io/web-scraping-tools/browser-fingerprint — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://scrapfly.io/web-scraping-tools/browser-fingerprint

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Scrapfly JA3

ACTIVE

JA3 checker with the handshake broken out.

https://scrapfly.io/web-scraping-tools/ja3-fingerprint — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://scrapfly.io/web-scraping-tools/ja3-fingerprint

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Scrapfly fingerprint API

ACTIVE

Machine-readable request-fingerprint echo endpoint — scriptable, which most of this section is not.

https://tools.scrapfly.io/api/fp/anything — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://tools.scrapfly.io/api/fp/anything

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

check.ja3.zone

ACTIVE

Lightweight JA3 echo service with no page around it.

https://check.ja3.zone/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://check.ja3.zone/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

FP-Monitor (fpmon)

ACTIVE

Academic tool that measures how much fingerprinting a site is actually doing to you.

Repository

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://fpmon.github.io/fingerprinting-monitor/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Cloudflare Turnstile docs

ACTIVE

Full public developer documentation for the challenge you meet most often.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://developers.cloudflare.com/turnstile/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Cloudflare Bot Management docs

ACTIVE

Includes the bot-score concept pages, which are the closest thing to a published detection rubric any vendor offers.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://developers.cloudflare.com/bots/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Cloudflare Turnstile GA writeup

ACTIVE

The design rationale, in the vendor's own words.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://blog.cloudflare.com/turnstile-ga/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

DataDome documentation

ACTIVE

Platform documentation. The docs host is listed because datadome.co itself refuses automated clients.

Docs host listed; product host refuses automated clients

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://docs.datadome.co/docs/welcome-to-datadome-platform

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

HUMAN Security documentation

ACTIVE

Formerly PerimeterX. Product pages refuse automated clients; the docs host is open.

Docs host listed; product host refuses automated clients

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://docs.humansecurity.com/home

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Akamai Bot Manager

ACTIVE

Public product page. The techdocs portal behind it redirects to SSO, so it is not listed.

Docs host listed; product host refuses automated clients

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.akamai.com/products/bot-manager

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Kasada

ACTIVE

Root site. Documentation sits behind a portal login and is not listed here.

Docs host listed; product host refuses automated clients

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.kasada.io/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Arkose Labs developer docs

ACTIVE

Open developer documentation for the Titan challenge platform.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://developer.arkoselabs.com/docs/what-is-titan

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Imperva Advanced Bot Protection

ACTIVE

Product page; the technical documentation moved to the Thales cybersecurity docs host.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.imperva.com/products/advanced-bot-protection-management/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Google reCAPTCHA

ACTIVE

Developer documentation for v2, v3 and Enterprise.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://developers.google.com/recaptcha

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

hCaptcha documentation

ACTIVE

Open documentation, including the enterprise risk-scoring surfaces.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://docs.hcaptcha.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

AWS WAF Bot Control

ACTIVE

The managed rule groups documented rule by rule — unusually specific for a vendor.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://docs.aws.amazon.com/waf/latest/developerguide/waf-bot-control.html

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

F5 Distributed Cloud Bot Defense

ACTIVE

Formerly Shape Security. Product page; technical detail is gated.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.f5.com/products/distributed-cloud-services/bot-defense

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Eckersley — How Unique Is Your Web Browser?

ACTIVE

PETS 2010. The paper that started this field, and the origin of measuring a browser in bits of entropy.

https://coveryourtracks.eff.org/static/browser-uniqueness.pdf — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://coveryourtracks.eff.org/static/browser-uniqueness.pdf

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Laperdrix et al. — Browser Fingerprinting: A Survey

ACTIVE

ACM TWEB 2020. The single best orientation document if you are new to the area.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://arxiv.org/abs/1905.01051

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Laperdrix et al. — Beauty and the Beast

ACTIVE

IEEE S&P 2016. Large-scale measurement of fingerprint diversity, including the mobile turn.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.ieee-security.org/TC/SP2016/papers/0824a878.pdf

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Iqbal et al. — Fingerprinting the Fingerprinters

ACTIVE

IEEE S&P 2021. Automated detection of fingerprinting scripts in the wild.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://arxiv.org/abs/2008.04480

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Vastel et al. — FP-Stalker

ACTIVE

IEEE S&P 2018. How fingerprints evolve, and how long linkability survives that evolution.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://hal.inria.fr/hal-01652021/document

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Vastel et al. — FP-Scanner

ACTIVE

USENIX Security 2018. The inconsistency-detection paper every anti-detect claim should be read against.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-vastel.pdf

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Gómez-Boix et al. — Hiding in the Crowd

ACTIVE

WWW 2018. The counterweight: at real population scale, uniqueness is lower than the early papers implied.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://hal.inria.fr/hal-01718234/document

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Mowery & Shacham — Pixel Perfect

ACTIVE

W2SP 2012. Canvas fingerprinting, first described.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://hovav.net/ucsd/dist/canvas.pdf

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Cao et al. — (Cross-)Browser Fingerprinting

ACTIVE

NDSS 2017. Identifying a machine across two different browsers via OS and hardware features.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.ndss-symposium.org/ndss2017/ndss-2017-programme/cross-browser-fingerprinting-os-and-hardware-level-features/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Nikiforakis et al. — Cookieless Monster

ACTIVE

IEEE S&P 2013. The first systematic look at commercial fingerprinting providers.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.securitee.org/files/cookieless_sp2013.pdf

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Englehardt & Narayanan — 1-Million-Site Measurement

ACTIVE

CCS 2016. The measurement infrastructure that became OpenWPM.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://webtransparency.cs.princeton.edu/webcensus/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Senol et al. — USENIX Security 2022

ACTIVE

Leakage of form data before submission, measured at scale.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.usenix.org/conference/usenixsecurity22/presentation/senol

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Laperdrix et al. — Fingerprinting defenses (PoPETs 2020)

ACTIVE

An evaluation of the defences, including where randomisation makes you more identifiable rather than less.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://petsymposium.org/popets/2020/popets-2020-0009.pdf

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

W3C — Mitigating Browser Fingerprinting

ACTIVE

The specification-authoring guidance. Read it to understand why new web APIs look the way they do.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.w3.org/TR/fingerprinting-guidance/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Mozilla Security/Fingerprinting wiki

ACTIVE

A browser vendor's own working notes on which surfaces leak and what it intends to do about them.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://wiki.mozilla.org/Security/Fingerprinting

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Akamai — Passive Fingerprinting of HTTP/2 Clients

ACTIVE

Black Hat EU 2017. The origin of HTTP/2 frame-order fingerprinting, from the detection side.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://blackhat.com/docs/eu-17/materials/eu-17-Shuster-Passive-Fingerprinting-Of-HTTP2-Clients-wp.pdf

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

TUM/LRZ — Fingerprinting HTTP/2

ACTIVE

A live HTTP/2 fingerprint readout attached to the research behind it.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://privacycheck.sec.lrz.de/passive/fp_h2/fp_http2.html

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceNOASSERTION
Pushed2026-08-06
Release—
Stars1.4k
StateACTIVE
Silent8 d

OpenWPM

ACTIVE

The web-measurement platform most of the papers in this section were produced with.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-06 — 8 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-06
archivedfalse
latest_release—
license.spdx_idNOASSERTION
stargazers_count1400
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/openwpm/OpenWPM

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Antoine Vastel's blog

ACTIVE

Practical detection writeups from an author who also publishes the peer-reviewed version.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://antoinevastel.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Castle blog

ACTIVE

Detection-side engineering posts with unusual technical specificity.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://blog.castle.io/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Incolumitas (Nikolai Tschacher)

ACTIVE

Long-running bot-detection experiments, including a self-hosted detection test.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://incolumitas.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Fingerprint blog

ACTIVE

The commercial identifier vendor's engineering blog. Vendor-authored; read as a primary source about their own product.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://fingerprint.com/blog/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceMIT
Pushed2026-08-09
Releasev5.2.0 · 2026-04-07
Stars28.3k
StateACTIVE
Silent5 d

FingerprintJS

ACTIVE

The open-source collector, from the company that sells the commercial identifier built on top of it.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-09 — 5 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-09
archivedfalse
latest_releasev5.2.0 · 2026-04-07
license.spdx_idMIT
stargazers_count28300
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/fingerprintjs/fingerprintjs

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceMIT
Pushed2026-08-11
Release—
Stars1.4k
StateACTIVE
Silent3 d

BotD

ACTIVE

Browser-side bot detection library — the same team's answer to the question this whole catalogue circles.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-11 — 3 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-11
archivedfalse
latest_release—
license.spdx_idMIT
stargazers_count1400
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/fingerprintjs/BotD

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceMIT
Pushed2026-07-17
Releasev1.10.1 · 2026-07-17
Stars1.1k
StateACTIVE
Silent28 d

ThumbmarkJS

ACTIVE

Independent open-source fingerprinting library with a published component breakdown.

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-17 — 28 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-17
archivedfalse
latest_releasev1.10.1 · 2026-07-17
license.spdx_idMIT
stargazers_count1100
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/thumbmarkjs/thumbmarkjs

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceMIT
Pushed2026-06-11
Release—
Stars2.5k
StateACTIVE
Silent64 d

CreepJS (source)

ACTIVE

The source behind the test page. Worth reading as a catalogue of lie-detection techniques in itself.

Source

Evidence

Why ACTIVE: pushed_at = 2026-06-11 — 64 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-06-11
archivedfalse
latest_release—
license.spdx_idMIT
stargazers_count2500
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/abrahamjuliot/creepjs

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceMIT
Pushed2026-08-09
Release—
Stars554
StateACTIVE
Silent5 d

detectIncognito

ACTIVE

Private-browsing detection across engines; a narrow surface maintained properly.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-09 — 5 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-09
archivedfalse
latest_release—
license.spdx_idMIT
stargazers_count554
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/Joe12387/detectIncognito

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceBSD-3-Clause
Pushed2026-08-02
Releasev1.8.2 · 2026-08-02
Stars2.5k
StateACTIVE
Silent12 d

uTLS

ACTIVE

Go TLS library that lets you choose your ClientHello. The foundation almost everything in this section stands on.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-02 — 12 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-02
archivedfalse
latest_releasev1.8.2 · 2026-08-02
license.spdx_idBSD-3-Clause
stargazers_count2500
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/refraction-networking/utls

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceMIT
Pushed2026-08-04
Release—
Stars74
StateACTIVE
Silent10 d

uQUIC

ACTIVE

The same idea for QUIC, which is where this problem is moving.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-04 — 10 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-04
archivedfalse
latest_release—
license.spdx_idMIT
stargazers_count74
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/refraction-networking/uquic

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceMIT
Pushed2026-08-08
Releasev2.1.0 · 2026-08-08
Stars2.7k
StateACTIVE
Silent6 d

curl-impersonate (lexiforest)

ACTIVE

The maintained fork: curl builds whose TLS and HTTP/2 handshakes match real browsers.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-08 — 6 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-08
archivedfalse
latest_releasev2.1.0 · 2026-08-08
license.spdx_idMIT
stargazers_count2700
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/lexiforest/curl-impersonate

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceMIT
Pushed2026-08-08
Release—
Stars6.3k
StateACTIVE
Silent6 d

curl_cffi

ACTIVE

Python bindings over curl-impersonate; the usual practical entry point.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-08 — 6 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-08
archivedfalse
latest_release—
license.spdx_idMIT
stargazers_count6300
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/lexiforest/curl_cffi

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceBSD-4-Clause
Pushed2026-07-02
Releasev1.15.1 · 2026-07-02
Stars1.8k
StateACTIVE
Silent43 d

tls-client (Go)

ACTIVE

HTTP client with selectable TLS profiles, plus a shared-library build for other languages.

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-02 — 43 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-02
archivedfalse
latest_releasev1.15.1 · 2026-07-02
license.spdx_idBSD-4-Clause
stargazers_count1800
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/bogdanfinn/tls-client

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceGPL-3.0
Pushed2026-07-07
Release—
Stars1.5k
StateACTIVE
Silent38 d

CycleTLS

ACTIVE

JA3-controllable HTTP client with Go and JavaScript interfaces.

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-07 — 38 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-07
archivedfalse
latest_release—
license.spdx_idGPL-3.0
stargazers_count1500
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/Danny-Dasilva/CycleTLS

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceNOASSERTION
Pushed2026-07-21
Release—
Stars2k
StateACTIVE
Silent24 d

JA4+

ACTIVE

The current generation of network fingerprints: TLS, HTTP, TCP and more, each with its own suffix.

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-21 — 24 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-21
archivedfalse
latest_release—
license.spdx_idNOASSERTION
stargazers_count2000
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/FoxIO-LLC/ja4

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

Licence is FoxIO's own, not an OSI identifier. GitHub reports NOASSERTION and so does this register — read the file before you vendor it. — ED.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

JA4+ explainer

ACTIVE

The authors' own explanation of what each JA4 component encodes.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://blog.foxio.io/ja4%2B-network-fingerprinting

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

JA3 origin writeup

ACTIVE

The post that introduced JA3 and JA3S, kept for the reasoning rather than the code.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://engineering.salesforce.com/tls-fingerprinting-with-ja3-and-ja3s-247362855967/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceGPL-3.0
Pushed2026-07-27
Release—
Stars445
StateACTIVE
Silent18 d

TrackMe (tls.peet.ws)

ACTIVE

The server behind tls.peet.ws — self-host it and you have your own handshake mirror.

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-27 — 18 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-27
archivedfalse
latest_release—
license.spdx_idGPL-3.0
stargazers_count445
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/pagpeter/TrackMe

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceApache-2.0
Pushed2026-08-13
Release—
Stars1.1k
StateACTIVE
Silent1 d

rama

ACTIVE

Rust framework for building proxies with explicit control over the emitted fingerprint.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-13 — 1 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-13
archivedfalse
latest_release—
license.spdx_idApache-2.0
stargazers_count1100
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/plabayo/rama

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceMIT
Pushed2026-08-13
Release—
Stars44.7k
StateACTIVE
Silent1 d

mitmproxy

ACTIVE

The general-purpose interception proxy. Not anti-detect tooling, and the fastest way to see what your stack actually sends.

Source

Evidence

Why ACTIVE: pushed_at = 2026-08-13 — 1 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-08-13
archivedfalse
latest_release—
license.spdx_idMIT
stargazers_count44700
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/mitmproxy/mitmproxy

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

AmIUnique global statistics

ACTIVE

Live per-attribute distributions from the AmIUnique corpus. Note the path: /stats returns 404.

https://amiunique.org/fingerprints-global-statistics — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://amiunique.org/fingerprints-global-statistics

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

EFF Cover Your Tracks — Learn

ACTIVE

The entropy methodology and aggregate results behind the test, written to be checked.

https://coveryourtracks.eff.org/learn — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://coveryourtracks.eff.org/learn

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

tlsfingerprint.io

ACTIVE

University of Michigan live population statistics for TLS ClientHellos seen on a real network.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://tlsfingerprint.io/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

JA4 Database

ACTIVE

Public JA4-to-application mapping, contributed to and queryable.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://ja4db.foxio.io/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Device and Browser Info datasets

ACTIVE

Public device and browser attribute datasets with an API in front of them.

https://deviceandbrowserinfo.com/info_device — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://deviceandbrowserinfo.com/info_device

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

HTTP Archive reports

ACTIVE

Longitudinal platform and API-usage data across millions of sites. The denominator for a lot of claims.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://httparchive.org/reports

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Web Almanac

ACTIVE

Annual chapters, including privacy and tracking, written against that data.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://almanac.httparchive.org/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Chromium Privacy Sandbox

ACTIVE

Platform direction on fingerprinting surfaces, from the engine with the largest share.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.chromium.org/Home/chromium-privacy/privacy-sandbox/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Multilogin

ACTIVE

The long-running commercial incumbent; the product most open-source entries are positioned against.

https://multilogin.com/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://multilogin.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

GoLogin

ACTIVE

Commercial anti-detect browser with public API documentation.

https://gologin.com/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://gologin.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Dolphin Anty

ACTIVE

Commercial anti-detect browser aimed at affiliate and multi-account teams.

https://dolphin-anty.com/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://dolphin-anty.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

AdsPower

ACTIVE

Commercial anti-detect browser with local API and team seats.

https://www.adspower.com/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.adspower.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Incogniton

ACTIVE

Commercial anti-detect browser with a documented automation API.

https://incogniton.com/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://incogniton.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Kameleo

ACTIVE

Commercial anti-detect browser; documentation lives on help.kameleo.io, not /docs.

https://kameleo.io/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://kameleo.io/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Octo Browser

ACTIVE

Commercial anti-detect browser with public docs.

https://octobrowser.net/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://octobrowser.net/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Undetectable

ACTIVE

Commercial anti-detect browser. Note the name collision with the open-source entry in section 01.

https://undetectable.io/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://undetectable.io/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Ghost Browser

ACTIVE

Multi-session browser aimed at agencies rather than at detection evasion.

https://ghostbrowser.com/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://ghostbrowser.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

ixBrowser

ACTIVE

Commercial anti-detect browser with a free tier.

https://ixbrowser.com/en — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://ixbrowser.com/en

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Nstbrowser

ACTIVE

Commercial anti-detect browser bundled with a cloud scraping service.

https://www.nstbrowser.io/en — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://www.nstbrowser.io/en

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

Hidemyacc

ACTIVE

Commercial anti-detect browser aimed at e-commerce multi-accounting.

https://hidemyacc.com/ — printed, not linked

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://hidemyacc.com/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

See also · superseded by · alternatives

LicenceN/A
HTTP200
Checked2026-08-14
Members11,436
StateACTIVE
Silent—

Scraping Enthusiasts

ACTIVE

The strongest anti-bot-focused server, including puppeteer-extra maintainers.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://discord.gg/VvGZwtwzSr

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
Members21,025
StateACTIVE
Silent—

Extract Data Community (Zyte)

ACTIVE

The largest of the scraping servers by membership, vendor-hosted.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://discord.com/invite/extract-data-community-993441606642446397

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
Members5,038
StateACTIVE
Silent—

Oxylabs Community

ACTIVE

Proxy-vendor-hosted community; useful for network-layer questions.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://discord.com/invite/6jkDvaC9dS

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
Members3,370
StateACTIVE
Silent—

Web Scraping & Data Extraction

ACTIVE

General scraping server, independent of any vendor.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://discord.com/invite/fHbbHTq4CQ

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
Members3,243
StateACTIVE
Silent—

Scrapy

ACTIVE

The Scrapy project's own server. Framework-first rather than evasion-first.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://discord.gg/eKJEjrxtGb

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
Members936
StateACTIVE
Silent—

Proxyway

ACTIVE

Small proxy-review community.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://discord.gg/9v9WXdeDNZ

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceN/A
HTTP200
Checked2026-08-14
StateACTIVE
Silent—

ScrapeOps Discord directory

ACTIVE

A meta-source: someone else's index of scraping communities, useful for finding servers this one has not checked.

Source

Evidence

Why ACTIVE: No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

FieldValue at this printing
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: HEAD https://scrapeops.io/web-scraping-playbook/best-web-scraping-discord-servers/

No repository, so there is no API field to re-read from a browser. A cross-origin liveness check has to be made server-side; this entry's status comes from the register's own sweep.

LicenceNO LICENCE DECLARED
Pushed2026-07-27
Release—
Stars5.1k
StateACTIVE
Silent18 d

niespodd/browser-fingerprinting

ACTIVE

The heavyweight incumbent: deep prose analysis of bot-protection systems rather than a broad index. No licence file, so the text carries no reuse grant.

No licence declared

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-27 — 18 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-27
archivedfalse
latest_release—
license.spdx_idnull (none declared)
stargazers_count5122
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/niespodd/browser-fingerprinting

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

The best writing in this space, and it publishes no licence, no check date and no per-entry status. Those are the three fields this catalogue exists to add — not a criticism of the prose, which remains better than ours. — ED.

LicenceNO LICENCE DECLARED
Pushed2026-07-26
Release—
Stars1.9k
StateACTIVE
Silent19 d

TheGP/untidetect-tools

ACTIVE

The closest direct competitor for anti-detect tooling; heavy on captcha solvers and SMS activation, thin on TLS and papers.

No licence declared

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-26 — 19 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-26
archivedfalse
latest_release—
license.spdx_idnull (none declared)
stargazers_count1884
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/TheGP/untidetect-tools

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceNOASSERTION
Pushed2026-07-28
Release—
Stars8.1k
StateACTIVE
Silent17 d

lorien/awesome-web-scraping

ACTIVE

Language-organised scraping libraries. Adjacent rather than competing — almost no fingerprinting coverage.

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-28 — 17 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-28
archivedfalse
latest_release—
license.spdx_idNOASSERTION
stargazers_count8061
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/lorien/awesome-web-scraping

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceNO LICENCE DECLARED
Pushed2026-07-24
Release—
Stars81
StateACTIVE
Silent21 d

embeddinglayer/awesome-fingerprinting

ACTIVE

Research-aggregation angle; best overlap on papers, nearly nothing on evasion tooling.

No licence declared

Source

Evidence

Why ACTIVE: pushed_at = 2026-07-24 — 21 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-07-24
archivedfalse
latest_release—
license.spdx_idnull (none declared)
stargazers_count81
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/embeddinglayer/awesome-fingerprinting

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

LicenceNO LICENCE DECLARED
Pushed2026-05-19
Release—
Stars0
StateACTIVE
Silent87 d

Nika-Proxy/awesome-tls-fingerprinting

ACTIVE

Narrow TLS-only list, vendor-operated, with no stars at the field check.

No licence declared · Vendor-operated

Source

Evidence

Why ACTIVE: pushed_at = 2026-05-19 — 87 days, within the 90-day ACTIVE threshold.

FieldValue at this printing
pushed_at2026-05-19
archivedfalse
latest_release—
license.spdx_idnull (none declared)
stargazers_count0
http_status200
fetched_at2026-08-14T09:12:00Z
rubric_edition2nd, in force

Endpoint: GET https://api.github.com/repos/Nika-Proxy/awesome-tls-fingerprinting

unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON


Why 90 days and not six months

The first edition of this rubric called anything pushed within 180 days ACTIVE, and the second edition cut that in half. The reason is not tidiness. Detection changes on a shorter cycle than half a year — a challenge is reshaped, a header order is added to a model, a CDP call stops being ignored — so an evasion technique that has not been touched since the last two browser majors is not a current one, however well it worked when it was written.

What the threshold does not claim is that a recent push means good code. A push is a commit landing on a branch. It is not a release, not a fix, not a test run, and not a promise. What it is, and all it is, is evidence that somebody is still there — which is exactly the question a stale link register cannot answer at all.

What to read next to this state

Read the licence column beside it. A permissively licensed project that stopped shipping is not a safer dependency than a copyleft one that did not, and the reverse is equally true: an actively maintained project that declares no licence at all has given you no grant to use it. Read the release column too, because a project that pushes constantly and tags rarely is asking you to depend on a branch.

Then read the state that sits either side of this one. An entry drops out of ACTIVE the moment its liveness field crosses 90 days, and it does so silently, on the next sweep, without anyone deciding.


Questions about the ACTIVE mark

Answered from the rule printed above, and from the fields it reads.

What does ACTIVE mean in this anti-detect registry?

That the entry was pushed to within 90 days of the field check, is not archived, and answers on its listed address. For an entry with no repository it means only the last of those three, because the other two fields do not exist for it. Nothing about quality, popularity or effectiveness is claimed by this state or by any other.

Does ACTIVE mean the tool still evades detection?

No, and no state on this site makes a claim of that kind. This register has run no entry against any anti-bot system, publishes no detection-test results, and records a project's own claims about evasion as claims rather than repeating them as findings.

How often is this list re-checked?

This printing was produced by one manual sweep, recorded with its failures on the field log. The nightly automated sweep the rubric is written for needs a server-side token and a store for history and is not in service yet — until it is, the corrected-to date in the folio is the only claim this catalogue makes about how current it is.


Every row on this page is a project someone once chose, and the state beside it is the part that was invisible at the moment of choosing. Donut Browser is filed in section 01 under the same rule, with the same fields printed against it and no exemption of any kind: an open-source anti-detect browser under AGPL-3.0, with engine-level fingerprint spoofing through the Wayfern Chromium fork rather than injected JavaScript, a local REST API and MCP server on your own machine, self-hostable sync, and a pre-launch gate that refuses to start a profile when the proxy's exit geography contradicts the profile's fingerprint. If it stops shipping, this rubric marks it without anyone's permission.

Download Donut Browser

curl -fsSL https://donutbrowser.com/install.sh | sh

macOS · Windows · Linux · Nix. Desktop only. Source, AGPL-3.0 · Its entry · The rubric · The keepers' disclosure

Other states: SEMI · NRND · WITHDRAWN · ARCHIVED · DEAD