Resources Center
Knowledge material for technical stakeholders exploring Fraudnode workflows.
Does the public checker talk to a live backend?
Yes. The site checker opens a session through Orca, collects through Spider, and can request analysis. If analysis cannot finish, the product fails closed instead of inventing an allow.
What is Playground, and is it a live VPN?
Playground reuses the checker session from this browser tab. Clean is that collect as captured. VPN, proxy, and Tor screens are demonstration overlays on a copy of the JSON. They are not a live VPN, proxy, or Tor circuit, and they do not rewrite TLS JA3.
Why do language and timezone stay the same on the VPN overlay?
A typical tunnel changes the path (IP, geo, DNS, often MSS and UDP). It rarely changes the browser stack: JS locale, TLS ClientHello, TCP option order. That split is what anti-fraud reads as a masked login. Playground shows it on your numbers.
Are the metrics in the marketing UI real product claims?
Checker counts come from live sessions. Overlay IP, ASN, DNS, and MSS values in Playground are illustrative of typical tunnels. They are labeled as demonstration overlays, not as a live egress.