FreeChrome extension

Inspector anti-fraud checks

See how websites inspect your browser: which APIs they call, which anti-fraud services they use, and which ports on your computer they access. The extension saves reports as PDF or JSON and blocks unnecessary APIs.

Sample report for ebay.com

Features

Dozens of fingerprinting techniques on one screen

Results in the extension window or Chrome side panel: operation counters and previews of values the website has already read.

What the extension tracks

Canvas

Pixel reading and image export. You can view the image the website has already read directly in the extension.

toDataURLtoBlobgetImageData

WebGL and WebGPU

Calls to graphics APIs and checks of GPU capabilities.

getParametergetExtensionnavigator.gpu

Fonts and geometry

Text measurements, installed-font checks, and page element dimensions.

measureTextFontFaceSetgetClientRects

Web Audio

Audio contexts, offline rendering, and access to the audio analyser.

OfflineAudioContextAnalyserNode

WebRTC

Connection creation, STUN/TURN settings, media parameters, and certificate fingerprints.

RTCPeerConnectionSTUN/TURNgenerateCertificate

Browser and device

User-Agent, Client Hints, screen and window parameters, CPU thread count, and memory size.

userAgentDatahardwareConcurrencydeviceMemory

Permissions and actions

Browser permission checks, pointer-property reads, and Idle Detection.

permissions.queryPointerEventIdleDetector

New browser APIs

Calls to WebAssembly, timing APIs, WebNN, and Chrome built-in AI APIs.

WebAssemblyperformance.nowWebNN

Environment

Battery, network type, keyboard layout, window management, and Compute Pressure.

getBatterynavigator.connectiongetScreenDetails

Network signals

Attempts to connect to local ports, port numbers, request sequences resembling DNS tests, and response headers.

localhostWebSocketAccept-CH

Identification resources

Anti-fraud services on the page, installed-extension checks, and Google experiment IDs from X-Client-Data.

ThreatMetrixchrome-extension://X-Client-Data

Check any website

Install the extension, open any page, and see which APIs it calls.

Install in Chrome

Sample report

What ebay.com checks in 33 seconds

A real Pro mode report: 4 pages, 249 requests, 7 third-party domains.

01

Recognized protection and identification services

Recognized during recording

LexisNexis ThreatMetrix

•Visit 3 · Document · 1 · ebay.com · WebRTC server match
•Visit 4 · Document · 1 · ebay.com · WebRTC server match
DET-06016 · Counters

Local port check · Possible port scanning

Observation
Local connection attempts — 16Requested local ports
21123389527959005901590259035931593859395944595060396040707063333
Interpretation
A sequence of attempts to access different ports on the same local address resembles port scanning. · Low interpretation confidence
02

Interaction map

Third-party resources loaded by pages

ebay.com
ebaystatic.comebay-us.comonline-metrix.netforter.comperfdrive.comquantummetric.com*.cloudfront.net
44

detected techniques

Canvas, WebGL, audio, fonts, screen and browser parameters. Each technique includes a counter, phase, data source, and limitations.

16

attempts to connect to local ports

Among them are 3389 (RDP), 5900–5903 (VNC), 5938 (TeamViewer), and 7070 (AnyDesk). These ports are used by remote-access software.

7

third-party domains

online-metrix.net, forter.com, perfdrive.com, and four more. The report shows what each page loaded.

1

recognized anti-fraud service

LexisNexis ThreatMetrix: the WebRTC server address matched a catalog rule.

Data is taken from the report. The full ebay.com report is 120 pages long.

Reports

Record a scenario and save the report

Pro mode records up to 10 minutes of website activity. The report is useful for investigations, audits, and teamwork.

01

Start recording

Choose a website and start Pro mode. Recording lasts up to 10 minutes and can be stopped at any time.

02

Run through the scenario

Registration, sign-in, cart, payment. The extension records navigation, sanitized page titles, URL patterns, and detected techniques.

03

Save the result

Export JSON for development and audits, or save a PDF using Chrome print.

What the report includes

✓Recognized anti-fraud and identification services
✓Map of page and domain relationships
✓Techniques with descriptions, confidence levels, and limitations
✓Resource groups, request types, and HTTP response codes

What the report does not include

✕Credentials, query parameters, and URL fragments
✕Images and form contents
✕Request and response bodies
✕Cookies and ICE connection details

API blocking

15 switches for API blocking

You control blocking: set default rules and configure exceptions for individual websites.

✓Default rules for all websites
✓Separate rules for each domain
✓Works only on websites you have granted access to
API blockingFor all websites
Canvas reading
WebGL
WebGPU
Web Audio
WebRTC
WebAssembly
Local font access
Window management
Compute Pressure
Idle Detection
Battery
Network information
Keyboard API
Client Hints in JavaScript
Clipboard reading

Benefits

Your data stays in your browser

Analysis runs locally

The extension runs in your browser; analysis results are not sent to our servers. Reports remain with you until you choose to export them.

Reports without personal data

Credentials, parameters, and fragments are removed from URLs. Cookies, forms, and request bodies are not saved.

Transparent conclusions

An API call by itself does not prove tracking. That is why each technique in the report includes confidence, data source, and limitations.

Who it is for

Who can benefit from the extension

Media buyer

See which anti-fraud services a platform uses and what they check before launching accounts.

Anti-fraud engineer

Compare your protection with other websites and see which signals third-party services collect.

Security researcher

Document fingerprinting and port scanning in reports for audits and publications.

Developer

Check which APIs your scripts and connected SDKs call before release.

Privacy specialist

See which third-party domains a website loads and which APIs they call.

QA engineer

Record the scenario and attach a JSON or PDF report to the bug report.

 
 
Dr. Дмитрий Момот (Vektor T13)

Developer

Dr. Dmytro Momot

Vektor T13

CEO & Founder Detect Expert

Cybersecurity and anti-fraud researcher with 17+ years of experience. Developer of an anti-detect platform and IP Auditor.

PhDLeiden University, Netherlands
17+years in cybersecurity
10K+clients
90+free webinars
Talks and awardsInCyber Forum Tokyo 2025GiSec Dubai 2025FIC Lille 2024Forbes Choice

Already using it?

Rate Detect.Expert in the Chrome Web Store

The extension is free. Rating it takes a minute and helps others find Detect.Expert in the store. Found a bug or missing a feature? Leave a review — we read every one.

★★★★★

Click a star to open the Reviews tab in the Chrome Web Store

FAQ

Frequently asked questions

Is the extension paid?

No. Detect.Expert is free and installs from the Chrome Web Store.

Where does the analysis data go?

Nowhere. Analysis runs in your browser, and reports stay local until you export them.

If a website calls an API, is it fingerprinting me?

Not necessarily. The same APIs are used by players, editors, and video calls. The extension shows what was called and how often, while the report gives confidence and limitations for each technique.

What is Pro mode?

A scenario recording of up to 10 minutes: navigation, sanitized page titles and URL patterns, permitted network metadata, and analysis results. You can export JSON or save a PDF.

Can API blocking break websites?

It can, if a website depends on that API. That is why blocking is enabled manually: for all websites or only selected ones.

Is this an anti-detect browser?

No. The extension shows checks and blocks individual APIs, but it does not spoof the fingerprint. To change browser, OS, and hardware fingerprints, use Antidetect System.

Which browsers does it support?

Google Chrome on desktop. The interface is translated into 12 languages, including Russian and Ukrainian.

Where can I report a bug?

Leave a review in the Chrome Web Store. We read every review and consider them in updates.

You may also find useful

Antidetect System

User emulation on virtual machines: changes browser, OS, and hardware fingerprints.

Try now

IP Auditor

Bulk IP address checks with a full quality audit.

Try now

Proxy

Mobile LTE and residential proxies for account operations.

Try now

See what a website checks in your browser

Free Chrome extension. Analysis runs locally.

By clicking "Accept", you agree to this Detect Expert can use cookies to help personalize content.

You can always opt out by following guidelines in our Cookie Policy.