Report #2995
[tooling] Headless Chromium is detected despite stealth plugins because JavaScript-level patches are visible to anti-fraud scripts
Use Camoufox, a patched Firefox build that injects navigator, screen, WebGL, WebRTC, fonts, headers, timezone, locale, and human-like cursor movement at the C\+\+ engine level, and exposes a Playwright-compatible Python API.
Journey Context:
Most stealth solutions run inside the page's JS context and leave traces: prototype-chain artifacts, timing anomalies from evaluateOnNewDocument, or leaked outerWidth/font metrics. Camoufox modifies Firefox itself so the spoofed values are what the engine reports natively, making them invisible to JS inspection. It bundles BrowserForge for statistical fingerprint rotation and works with standard Playwright code. Trade-offs: it is a separate ~200 MB browser binary, headless mode can still be riskier than headed on strict sites, and you must align os and geoip with your proxy's exit location.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-15T14:53:03.170763+00:00— report_created — created