What is GhostRoute?

Plain English explanation — no technical knowledge required

GhostRoute is a Windows desktop application that sends real, human-looking traffic to your website. Instead of fake bot traffic that gets detected and filtered, GhostRoute opens a real Chrome browser, visits warmup sites, searches Google, and then lands on your page — just like a real visitor would.

Think of it like hiring hundreds of virtual visitors who browse your site naturally — they scroll, move the mouse, click links, and spend time on your pages.

🎯
Who is this for? Website owners who want to increase traffic metrics, improve ad revenue signals, test their site under real browser conditions, or boost SEO engagement signals.
🕵️
Undetectable
Patches all bot signals. Looks identical to real Chrome browser traffic.
🖱️
Human Mouse
Curved mouse paths, natural scroll, text selection — like a real person.
🔗
Proxy Support
Each visit comes from a different IP. Free & paid proxy support built in.
🎬
Recorder
Record your own click paths. GhostRoute replays them automatically.
📈
Organic Search
Simulates visitors finding your site through Google, Bing, or DuckDuckGo search.
📊
Analytics
Track visits, success rates, and export reports as CSV.
What's New in v4.1.0 LATEST

Every improvement shipped in this release

New features

🎨
Dark / Light Theme Toggle
Switch between dark and light UI with the moon/sun button in the top bar. Preference is saved between sessions.
🔽
Scrape Type Filter
Filter which proxy protocols to scrape: ALL, HTTP, HTTPS, SOCKS4, SOCKS5. Click the pill buttons at the top of Proxy Manager.
🧬
Fingerprint Generator
Generates a realistic, unique browser fingerprint (device, OS, screen, WebGL vendor) for every session.
😴
Session Tiredness Engine
Simulates natural human fatigue — actions gradually slow as the session ages, matching real browsing behavior.
🕐
Campaign Scheduler
Schedule campaigns to start automatically at a set time. Enterprise feature.
📥
VPS Import from Proxy Manager
One-click import of all working (OK) proxies from Proxy Manager directly into VPS Farm diversity settings.

UI & performance improvements

Installation

Works on Windows 10 and Windows 11 (64-bit only)

Step-by-step install

  1. Download GhostRoute Setup 4.1.0.exe from ghostroute.io
  2. Run the installer. Choose your install folder (default is fine).
  3. A shortcut is created on your Desktop and Start Menu automatically.
  4. Open GhostRoute — your 3-day free trial starts immediately, no sign-up needed.
  5. First launch will download Chromium browser files (~150 MB). Wait for it to finish.

Portable version (no install needed)

Download GhostRoute 4.1.0.exe (portable), put it anywhere on your PC, and run it directly. No installation required. Settings are still saved between sessions.

How to uninstall

Go to Control Panel → Programs → GhostRoute → Uninstall. Your data (proxies, URLs, settings) stored in %APPDATA%\GhostRoute is not deleted — delete that folder manually if you want a clean removal.

License Activation

Start for free — upgrade when you're ready

Free Trial

You get a full 3-day free trial automatically. No credit card, no sign-up. The trial is tracked on our servers — closing the app or reinstalling does NOT reset it.

How to activate your license key

  1. Purchase a plan at ghostroute.io
  2. You'll receive a key like XXXX-XXXX-XXXX-XXXX by email
  3. In the app sidebar, enter your email and paste the key
  4. Click Activate License (internet required)
  5. Done — your plan upgrades instantly

Moving to a different PC

Go to Settings → License → Deactivate Device. This frees your slot so you can activate on a new machine. Pro = 3 devices, Enterprise = 10 devices.

📶
No internet? GhostRoute checks your license on each launch. If the server is unreachable, your last successful validation is used as a fallback for up to 7 days.
Quick Start (5 min)

Get your first campaign running fast

  1. Add Proxies — Go to Proxy Manager → click Scrape Free Proxies. Wait for tests to finish. You need at least 3–5 working proxies.
  2. Enter your URL — Go to Campaigns → type your website address in the Target URL field (must start with https://).
  3. Pick a Preset — Click AdSense Safe if you have ads on your site, or SEO Traffic for general traffic boost.
  4. Set visits to 10 — Always start small to test first.
  5. Run Test Visit — Click 🧪 Test Visit. This runs ONE visit and shows you a full diagnostic report. Check for any errors.
  6. Launch — Click 🚀 Launch Campaign. Watch the log and traffic chart update in real time.
💡
Beginner tip: Always run a Test Visit before your first full campaign. It will catch 90% of problems (bad proxies, wrong URL, blocked by site) before you waste time and proxies.
Dashboard

Your real-time control centre

The dashboard shows you everything happening right now. You don't need to configure anything here — it's purely for monitoring.

How to use the Dashboard

  1. Click Dashboard in the sidebar — this is the home screen shown on launch
  2. During a campaign: watch the Live Stats Bar for active threads, visit count, and success rate updating in real time
  3. Watch the Live Traffic Chart — each peak shows a batch of visits. A flat line means the campaign is idle or stopped.
  4. Click Clear in the System Log to reset the log output at any time (log is not saved to disk)
  5. Add or edit target URLs directly in the URL Manager widget — changes apply to the next campaign
WidgetWhat it shows
Live Stats BarActive Threads, Visits Today, Success Rate, Proxies Available — updates every second during a campaign
Live Traffic ChartRolling 12-minute chart of visits per minute. Flat line = campaign idle or stopped.
Current ProxyThe proxy being used right now: IP, country, type, fraud score
System LogTimestamped log of all events. Click Clear to reset. Not saved to disk.
URL ManagerAdd/edit/delete your target URLs. Same list used by Campaigns.
Campaigns

Configure, launch, and monitor traffic campaigns

How to launch a campaign

  1. Click Campaigns in the sidebar
  2. Enter your website address in Target URL — must start with https://
  3. Choose a Preset (AdSense Safe, SEO Traffic, Stealth Max, or Custom)
  4. Set Total Visits — start with 10 for your first test
  5. Set Threads — how many browsers run at once. Must be ≤ number of working proxies.
  6. Toggle Headless ON (invisible) or OFF (visible browser window for debugging)
  7. Click 🧪 Test Visit first — runs one visit and shows a full diagnostic. Fix any issues before proceeding.
  8. Click 🚀 Launch Campaign — monitor progress in the live stats bar and system log
  9. Click ■ Stop Campaign at any time to pause. Active browsers finish their current visit before closing.

Campaign settings explained (plain English)

SettingWhat it means in simple wordsDefault
Target URLYour website address. Copy it from your browser address bar and paste here. Must start with https:// — if your site is http://, it won't work.
Total VisitsHow many people (browsers) you want to send. Setting 100 means 100 separate browser sessions open, browse, and close — same as 100 people visiting your site.10
ThreadsHow many people visit at the same time. Think of it like lanes on a highway — 3 threads = 3 browsers running in parallel right now. More threads = campaign finishes faster, but you need one working proxy per thread. If you have 5 working proxies, max threads = 5.3
Ad CTR %What percentage of visitors click an ad on your site. Set to 0 = nobody clicks ads (safe, impressions only). Set to 5 = 5 out of every 100 visitors will click an ad. If your site uses Google AdSense, ALWAYS keep this at 0.0%
Drip-FeedInstead of sending all 100 visits in 30 minutes, Drip-Feed spreads them over hours — 5–10 minute gaps between batches. Real human traffic doesn't all arrive at once. ON = safer for AdSense. OFF = faster campaign completion.OFF
Headless ModeON = Chrome browsers open and run completely invisible in the background. You won't see anything — the campaign runs silently. This is the normal mode for production. OFF = you can actually see the Chrome browser windows opening and browsing. Use this to watch what's happening if something goes wrong (debug mode). Turn OFF only for testing, then turn back ON.ON
💡
New user formula: Start with 10 visits, 3 threads, headless ON, ad CTR 0%. Once you confirm it's working with a Test Visit, increase visits to your target number. Never start with 500 visits on your first try.
🚫
AdSense Warning: NEVER set Ad CTR % above 0 if your site uses Google AdSense. Clicking your own ads is a violation of Google policy and can get your account banned permanently.

How visits work (step by step)

  1. GhostRoute picks a proxy from your pool and connects
  2. Opens a real Chrome browser with stealth protections active
  3. Visits warmup sites (Wikipedia, Google, etc.) to build session history
  4. If Organic Search is ON — searches your keyword on Google, clicks your result
  5. Lands on your target URL and performs the Journey (scroll, hover, click links)
  6. Closes the browser, marks visit as success, moves to next proxy

Stopping and Reports

Click ■ Stop Campaign at any time — active browsers finish their current visit before closing. After completion, click 📋 View Reports to see all past campaigns with CSV export.

Presets

One-click configurations for common use cases — best starting point for beginners

🌟
New user? Just pick a preset — it sets everything correctly for your situation. You don't need to touch any other settings.

How to apply a Preset

  1. Go to Campaigns tab
  2. Find the Preset dropdown or preset buttons
  3. Click the preset that matches your use case (see descriptions below)
  4. The preset immediately updates all related settings (threads, dwell times, drip-feed, organic search, stealth level)
  5. You can still fine-tune individual settings after applying a preset — the preset is a starting point, not a lock
  6. Select Custom to stop any preset from overriding your manual settings
🛡️ AdSense Safe — Recommended for monetised sites

Conservative settings designed to pass Google's Invalid Traffic detection. Safe to use on AdSense-monetised sites.

✓ PROS
  • Safest preset for AdSense accounts
  • Drip-feed spreads traffic naturally
  • Low thread count avoids burst detection
  • Long dwell times = better engagement signals
✗ CONS
  • Slowest — visits take longer
  • Fewer visits per hour due to delays
  • Not suitable for high-speed traffic needs
SHOULD I USE THIS?
YES Your site has Google AdSense or any display ads
YES You want to safely increase session time and engagement
NO You need fast bulk traffic in a short time
📈 SEO Traffic — For search ranking signals

Simulates visitors who found your site through Google, Bing, or DuckDuckGo search. Sends strong organic referrer signals to your analytics.

✓ PROS
  • Looks 100% organic to Google Analytics
  • Boosts click-through rate signals
  • Realistic session depth with inner pages
  • Multiple keyword rotation supported
✗ CONS
  • Slower than direct traffic (adds search step)
  • Needs a valid search keyword configured
  • Site must rank on Google for keyword to work naturally
SHOULD I USE THIS?
YES You want to improve Google Analytics organic traffic numbers
YES You're working on SEO and want engagement signals
NO Your site doesn't appear in Google search results yet
🕵️ Stealth Max — For sites with aggressive bot detection

Maximum stealth settings. All fingerprint protections on, slowest mouse speed, maximum randomisation. Use for sites with Cloudflare or other bot detection.

✓ PROS
  • Hardest to detect of all presets
  • Works on heavily protected sites
  • Every session looks unique
✗ CONS
  • Slowest visits — very deliberate mouse movement
  • Uses more proxy bandwidth per visit
  • Overkill for basic sites
SHOULD I USE THIS?
YES The site uses Cloudflare, PerimeterX, or similar
YES Test Visit shows detection issues
NO Simple blog or WordPress site with no bot protection
⚙️ Custom — For advanced users

All settings remain exactly as you configured them. No values are changed. Use this after you've tuned the settings manually.

SHOULD I USE THIS?
YES You've already set everything manually and want to keep your config
NO You're new — pick a named preset instead
Journey Builder

Design exactly what each visitor does on your site

The Journey Builder lets you drag and drop actions into an order. Each action runs in sequence during every visit. Toggle any step on or off. Click 💾 Apply to save.

💡
Beginner tip: The default journey (Accept Cookies → Human Mouse → Scroll → Smart Wait → Inner Page Visit) works well for most sites. Only customise if you have a specific need.

How to use Journey Builder

  1. Click Journey Builder in the sidebar
  2. Each step has a toggle switch — click it to enable or disable that step
  3. Drag steps up or down to change the order they execute during a visit
  4. For steps with parameters (e.g. Inner Page Visit has a depth setting, Ad Click has a CTR %), click the step to expand its settings
  5. Click 💾 Apply to save — the journey is used on the next campaign launch
  6. The saved journey applies to all URLs in your campaign equally
StepWhat it doesDefault
🍪 Accept CookiesAuto-clicks cookie consent popups (GDPR banners). Prevents the bot getting stuck on accept screens.ON
🖱️ Human MouseMoves the cursor in natural curves, hovers over elements, randomly selects text.ON
📜 Auto ScrollScrolls through the page in steps. Increases time-on-page and engagement signals.ON
⏱️ Smart WaitWaits a realistic amount of time based on page content before leaving.ON
🔗 Inner Page VisitClicks an internal link and visits a sub-page. Makes the visit look like real browsing. Parameter: depth (1–3 pages deep).ON (depth 1)
🗂️ Tab Switch & IdleOpens a dummy tab, waits, then returns to your site. Mimics a user multitasking.OFF
💰 Ad Click CTRClicks a Google Ad. Set CTR % parameter. Never use on your own AdSense site.OFF (0%)
✓ WHEN TO ADD MORE STEPS
  • Site has cookie banners — keep Accept Cookies ON
  • You want lower bounce rate — enable Inner Page Visit
  • You want longer sessions — enable Tab Switch
  • Non-AdSense ad network — enable Ad Click with low %
✗ WHEN TO REMOVE STEPS
  • Fast testing — remove all except Smart Wait
  • Site doesn't have inner links — disable Inner Page Visit
  • AdSense site — keep Ad Click OFF always
Campaign Scheduler Enterprise

Set campaigns to start automatically at a specific time — no babysitting required

What is the Scheduler?

The Scheduler lets you define a campaign start time and optionally a repeat interval. At the scheduled time, GhostRoute automatically triggers the campaign with your saved settings — even if you're not at your computer.

This is a manual control: you decide the time, the target URL, and the visit count. The engine handles the rest automatically.

How to set up a scheduled campaign

  1. Go to the Scheduler tab (Enterprise plan required)
  2. Select the Target URL from your URL list
  3. Set the Start Time — date and time the campaign should begin
  4. Set Visit Count and Threads as you would for a manual campaign
  5. Optionally enable Repeat and choose a daily or weekly interval
  6. Click Schedule — the entry appears in the queue. GhostRoute fires it at the set time.

Why use the Scheduler?

Traffic patterns that perfectly match your audience's waking hours look far more natural than campaigns run at arbitrary times. With the Scheduler you can:

✓ PROS
  • Fully automated — no manual launch needed
  • Time campaigns to match real audience hours
  • Daily repeat for ongoing traffic
  • Pairs well with Drip-Feed for all-day natural spread
✗ CONS
  • PC must remain powered on and connected
  • Enterprise plan required
  • One campaign runs at a time (use VPS Farm for parallel)
SHOULD I USE THE SCHEDULER?
YES You want to send traffic at specific hours every day without manual work
YES You're optimising for AdSense and need traffic spread across peak hours
NO You only run occasional one-off campaigns — just launch manually
Test Visit & Diagnostic Report

Always test before launching — catches problems before they waste your proxies

Click 🧪 Test Visit in the Campaigns tab. GhostRoute runs a single full visit and generates a detailed report.

What the report shows

SectionWhat it means
TimelineEvery step of the visit with time taken: proxy connect → warmup → page load → actions → exit. Green = passed, Red = failed.
Issues FoundList of problems: slow proxy, CAPTCHA detected, page timeout, JS errors on target. Each issue has a fix suggestion.
Overall Score0–100 stealth score. 80+ = good to launch. 60–80 = acceptable. Below 60 = fix issues first.
✓ COMMON PASS RESULTS
  • Proxy connected in under 3 seconds
  • Page loaded successfully
  • No bot detection triggered
  • All journey steps completed
✗ COMMON FAIL RESULTS
  • Proxy timeout — replace with faster proxy
  • CAPTCHA detected — use better residential proxy
  • Page not found — check your URL is correct
  • Journey step failed — site structure may have changed

How to run a Test Visit

  1. Make sure you have at least 1 working proxy in Proxy Manager (status: OK)
  2. Go to Campaigns tab → enter your Target URL
  3. Click 🧪 Test Visit (not Launch — just the test button)
  4. A single browser session runs with full logging enabled
  5. When it finishes, the diagnostic report opens automatically. Review each section:
  6. Green rows = passed. Red rows = problem found. Each red row shows a fix suggestion.
  7. Check the Overall Score: 80+ means you're good to launch. Below 60 — fix the issues first.
  8. Only after Test Visit passes cleanly, click 🚀 Launch Campaign for the full run
Proxy Manager

Every visit needs a different IP — proxies make this happen

A proxy is a server that routes your traffic through a different IP address. GhostRoute needs proxies so each visit appears to come from a different real person in a different location.

🌟
Beginner: Start with Scrape Free Proxies. It's one click and gets you working proxies instantly. For serious AdSense campaigns, upgrade to paid residential proxies.

Adding proxies

MethodBest forHow
Scrape FreeGetting started, testingClick Scrape Free Proxies. Pulls from 12 sources and tests automatically. Use the type filter pills to restrict which protocols are scraped.
Paid ProxiesAdSense campaigns, serious useEnter your provider credentials. Generates authenticated proxy URLs.
Manual AddAdding specific proxies you ownEnter host:port or host:port:user:pass, select type.
Bulk ImportLarge proxy listsPaste multiple proxies (one per line) via Batch Add.

How to use Proxy Manager

  1. Click Proxy Manager in the sidebar
  2. Select your proxy type filter pills at the top (or leave on ALL)
  3. Click Scrape Free Proxies — GhostRoute fetches from 12 sources and auto-tests each one
  4. Wait for testing to finish. Each proxy shows: status (OK / DEAD), speed (ms), type, fraud score, country
  5. Click Clear Dead to remove failed proxies from the list
  6. Optionally click Test All to re-check existing proxies at any time
  7. For paid proxies: enter your provider credentials in the Paid Proxy section → click Generate URLs → click Test All
⚠️
Disclaimer — Free Proxy Risks: Free proxies are operated by unknown third parties. Your traffic through them can be monitored, logged, or modified by the proxy operator. Never send sensitive data (passwords, personal info) through free proxies. For AdSense or any monetised campaign, always use paid residential proxies from a reputable provider.

Scrape Type Filter v4.1.0

Before scraping, select which protocols you want using the pill buttons at the top of the page: ALL · HTTP · HTTPS · SOCKS4 · SOCKS5. Multiple pills can be active at once. See the Scrape Type Filter section for full details on when to use each type.

Understanding proxy safety ratings

RatingFraud ScoreMeaningUse for AdSense?
✓ Elite0–20Clean residential IP. Looks like a real home user.✓ Yes
⏳ UnverifiedUnknownCould not verify via ip-api (rate limited). Retest in 1 minute.Maybe
✗ Leaking21–100Real IP is exposed or flagged as datacenter/bot. Avoid for sensitive campaigns.✗ No
✓ FREE PROXIES — PROS
  • No cost — great for testing
  • One-click scraping from 12 sources
  • Auto-tested after scraping
✗ FREE PROXIES — CONS
  • Shared — many people use same IP
  • Often flagged or slow
  • Not suitable for AdSense
  • Die quickly, need re-scraping
✓ PAID PROXIES — PROS
  • Residential IPs — looks like real home users
  • Elite safety scores
  • Fast and stable
  • Best for AdSense campaigns
✗ PAID PROXIES — CONS
  • Monthly cost from provider
  • Need an account with proxy provider

Auto-Refill

Enable in Settings. When your working proxy count drops below the threshold (default: 20), GhostRoute automatically scrapes fresh proxies and adds them mid-campaign without stopping.

SHOULD I USE AUTO-REFILL?
YES Running long campaigns where free proxies die frequently
YES You don't want to babysit the campaign
NO Using paid proxies that don't expire
Scrape Type Filter v4.1.0

Control which proxy protocols are fetched when scraping — new in v4.1.0

What is the Scrape Type Filter?

At the top of the Proxy Manager page you'll see protocol pill buttons: ALL · HTTP · HTTPS · SOCKS4 · SOCKS5. Clicking a pill toggles that protocol on or off. When you click Scrape Free Proxies, only the selected protocol types are fetched from the 12 scrape sources.

This is a manual control: you pick which types you want. By default ALL is active (no filter).

Which proxy type should I use?

TypeWhat it isBest forStealth level
HTTPStandard HTTP proxy. Fast but plain-text.Basic traffic, high volume, speed testingLow
HTTPSHTTP proxy with TLS — encrypted tunnel to proxySites that need HTTPS. Slightly better than plain HTTP.Medium
SOCKS4Low-level socket proxy. No authentication support.Legacy use. No auth = public-only proxies.Medium
SOCKS5Full SOCKS with auth, UDP support, IPv6AdSense campaigns, stealth, residential proxiesHighest

Why filter by type?

Different campaigns have different requirements:

💡
Recommended: For AdSense campaigns, select SOCKS5 only — SOCKS5 proxies support full protocol tunneling and are hardest to fingerprint. For bulk traffic where you just need numbers, use ALL.

How to use the Scrape Type Filter

  1. Go to Proxy Manager tab
  2. At the top of the page, find the protocol pills: ALL · HTTP · HTTPS · SOCKS4 · SOCKS5
  3. Click a pill to toggle it on (highlighted) or off. You can select multiple types at once.
  4. Click ALL to deselect everything and scrape all types
  5. Click Scrape Free Proxies — only selected types are fetched
🚫
Proxy Type Disclaimer:
HTTP proxies — Plain-text, unencrypted. The proxy server can read everything you send. They also commonly inject headers (X-Forwarded-For, Via) that expose your real IP to the target website. HTTP proxies always leak your identity on AdSense campaigns. Never use them for sensitive or monetised traffic.

HTTPS proxies — Encrypted tunnel to the proxy, but the proxy itself still sees your destination. Better than HTTP but still shared datacenter IPs — flagged by Google IVT.

SOCKS4 proxies — No authentication support. Always public/open proxies shared by hundreds of users. Suitable only for basic volume testing.

SOCKS5 proxies — Best option. Supports auth, full protocol tunneling, and IPv6. Hardest to detect. Use SOCKS5 for any AdSense or high-value campaign.
Organic Search Routing (SERP)

Simulate real visitors finding your site through Google, Bing, or DuckDuckGo — the strongest traffic signal for SEO and AdSense

When Organic Search is ON, GhostRoute runs a complete SERP (Search Engine Results Page) simulation. It doesn't visit your site directly — instead it opens Google, Bing, or DuckDuckGo, types your keyword, scrolls through the results page like a real user, finds your site listing, and clicks it. Your analytics sees this as organic / google, organic / bing, or organic / duckduckgo traffic with a real search engine referrer header.

What happens step by step inside a SERP visit
  1. Browser opens Google.com, Bing.com, or DuckDuckGo.com via the proxy (based on your split setting)
  2. The search box is located — Ghost Cursor moves to it naturally
  3. The keyword is typed character-by-character with human typing delay and occasional typos
  4. Enter is pressed — SERP page loads
  5. GhostRoute scrolls through the results naturally, simulating a user scanning listings
  6. Your site's result is located — cursor moves to it, hovers briefly, then clicks
  7. Your site loads with Referer: https://www.google.com/ in the HTTP headers
  8. Normal Journey steps run (scroll, inner page, dwell, etc.)

SERP position and ranking

GhostRoute searches for your site across the first 2–3 pages of results. The position it finds your site at matters for how the click looks in analytics:

Your ranking positionWhat happensSignal quality
Position 1–3Found immediately on page 1. Click happens fast — like a user who recognised the brand.Excellent
Position 4–10Found on page 1 after scrolling. Most natural click pattern.Excellent
Position 11–20GhostRoute goes to page 2 to find the result. Slightly less common but still valid.Good
Not foundFalls back to a direct visit with Google as referrer. No organic click recorded.Fallback only
💡
Best practice: Use long-tail keywords your site actually ranks for in positions 4–10. Clicks from mid-page results are the most natural — top 3 clicks are common for brand searches, but positions 5–8 look like an organic user genuinely browsing results.

Keyword strategy

Enter keywords in Human Emulation → Organic Search → Keywords. Comma-separated — each visit randomly picks one:

best vpn 2025, top vpn for streaming, cheap vpn software, buy vpn online

Keyword typeExampleBest for
Long-tail (3–5 words)best free vpn for windowsMost natural, easier to rank for, higher CTR signal
Short-tail (1–2 words)vpn softwareCompetitive — only use if you rank on page 1
Brand keywordsghostroute vpnDirect brand traffic — use for returning visitor simulation
Question keywordswhat is the best vpn 2025Looks very human — real searchers often phrase queries as questions

Search engine split — Google, Bing & DuckDuckGo

Default: 60% Google, 25% Bing, 15% DuckDuckGo — approximates real-world global search engine share. Adjust the sliders to match your audience's actual search habits.

Search EngineAnalytics referrerDefault shareBest for
Googleorganic / google60%Highest share worldwide. Essential for any campaign.
Bingorganic / bing25%Strong in US, UK, corporate/enterprise demographics. Older audiences.
DuckDuckGoorganic / duckduckgo15%Privacy-conscious users, tech audiences, US-based traffic. Fast-growing share.

Having all three engines in your analytics referrers looks far more natural than 100% Google — real sites receive organic traffic from multiple search engines. A site that only ever gets Google referrers is statistically unusual.

✓ PROS
  • Traffic appears as Organic/Google, Organic/Bing, or Organic/DuckDuckGo in analytics
  • Sends real search engine Referer header — not spoofed
  • 3-engine mix looks completely natural — real sites get traffic from all three
  • Boosts CTR signals that Google uses in ranking algorithms
  • Multiple keyword rotation creates authentic diverse search traffic
  • Full SERP scroll behaviour — mimics user scanning results before clicking
✗ CONS
  • Adds 10–20 seconds per visit (SERP page load + scroll + click)
  • Site must rank in top 20 results for the keyword
  • Uses more proxy bandwidth (SERP page + your page)
  • Not suitable if you just need fast raw visit numbers
SHOULD I USE ORGANIC SEARCH?
YES You want traffic to show as Organic / Google in analytics
YES SEO improvement and CTR signals are your goal
YES Your site appears in search results for the keywords you enter
YES AdSense campaigns — organic traffic is the safest-looking source
NO You just need fast bulk visit numbers (use direct mode instead)
NO Site doesn't appear in search results for any keyword yet

How to use Organic Search

  1. Go to Human Emulation tab → Core Behavior
  2. Toggle Organic Search to ON
  3. Scroll to the Organic Search settings block that appears
  4. Enter your keywords comma-separated: best vpn 2025, buy vpn, vpn for windows
  5. Set the Google / Bing / DuckDuckGo split sliders (default 60/25/15 is fine for most sites)
  6. Click Save Settings
  7. Run a Test Visit first — confirm GhostRoute finds your site in search results
  8. If Test Visit shows "site not found in SERP", add a keyword your site actually ranks for
  9. Launch campaign — every visit now performs the full SERP simulation
⚠️
Important: Your site must appear in search results for the keyword. If GhostRoute searches and cannot find your site within the first 2–3 pages, the visit falls back to a direct referrer visit. Always verify with a Test Visit before running a full campaign.
Browser Warmup

Build session history before hitting your target — makes each visit look like a real browsing session

What is Browser Warmup?

Before visiting your target URL, GhostRoute first visits 1–3 neutral websites (like Google, Wikipedia, or BBC). This builds a realistic browsing history inside the browser session. When your target site loads, it sees a browser that was already active — not an empty browser that opened straight on your site.

Think of it like this: a real person doesn't open their browser and immediately land on your site from nowhere. They were already browsing something. Warmup simulates this.

✓ PROS
  • Bypasses "cold start" bot detection
  • Builds realistic cookie history before your site loads
  • Creates natural referrer chain (prior sites → your site)
  • Makes returning visits look authentic
  • Strongly reduces IVT (Invalid Traffic) flags
✗ CONS
  • Adds 6–12 seconds per visit (2–4s per warmup URL)
  • Uses extra proxy bandwidth
  • Slightly fewer total visits per hour
SHOULD I USE WARMUP?
YES AdSense or any monetised site — always keep ON
YES Sites with Cloudflare or bot protection
YES Any serious production campaign
NO Quick debug testing — turn OFF for speed
NO Local/intranet site where external URLs are blocked

How to configure Warmup

Go to Settings → Warmup Customisation:

FieldWhat to enterDefault
Custom Warmup URLsOne URL per line. Use well-known sites. Leave blank for auto defaults.Wikipedia, YouTube, BBC, Reddit
Custom Warmup KeywordsDecoy search queries typed before your target. Leave blank for built-in random queries.Random built-in queries
⚠️
Only use real, popular sites for warmup URLs (Wikipedia, YouTube, BBC, Reddit, Amazon). Using obscure or fake sites for warmup will make the session history look suspicious — the opposite of what you want.

How to use Browser Warmup

  1. Go to Human Emulation tab → make sure Browser Warmup Visit toggle is ON
  2. Go to Settings tab → scroll to Warmup Customisation
  3. In Custom Warmup URLs: enter one URL per line (Wikipedia, YouTube, BBC, etc.) or leave blank to use built-in defaults
  4. In Custom Warmup Keywords: enter decoy search terms or leave blank for random built-in queries
  5. Click Save Settings
  6. Warmup now runs automatically at the start of every visit — no further action needed
Social Media Warmup

Use social media sites as warmup destinations to create the most realistic referral history

What is Social Media Warmup?

Standard Browser Warmup visits neutral sites like Wikipedia or YouTube before hitting your target. Social Media Warmup takes this further — it includes Facebook, Instagram, Twitter/X, or Reddit as part of the warmup chain. The result: when your site loads, the browser session already has social media cookies, localStorage data, and referral history — exactly like a real person who was browsing social media before landing on your site.

This is especially powerful for campaigns where you want traffic to appear as Social / Facebook or Social / Reddit in Google Analytics.

Why social media warmup matters

Warmup typeSession looks likeReferrer in AnalyticsDetection risk
No warmup (cold start)Browser opened directly on your site. Zero history.Direct / (none)High — cold start is a major bot signal
Standard warmup (Wikipedia, YouTube)User was reading content before arrivingDirect or organic (no social referrer)Low
Social media warmup (Facebook/Reddit/Twitter)User was on social media, then clicked a link to your siteSocial / facebook or Social / redditVery low — mirrors how a huge share of real traffic arrives

Which social platforms to use as warmup

PlatformURL to addBest for
Facebookhttps://www.facebook.comGeneral consumer audiences. Adds Facebook cookies — most common social referrer worldwide.
Reddithttps://www.reddit.comTech, niche, and community traffic. Reddit referral traffic is high-quality and trusted by analytics.
Twitter / Xhttps://twitter.comNews, tech, entertainment audiences. Quick visit + load = realistic session.
Instagramhttps://www.instagram.comLifestyle, fashion, food, visual content niches.
LinkedInhttps://www.linkedin.comB2B, professional services, SaaS — adds professional network referral signal.
Pinteresthttps://www.pinterest.comDIY, recipes, home decor, fashion — highly visual niches.
💡
Mix it up: Don't use only one social platform as warmup — real users visit multiple platforms. Add 2–3 social platforms alongside 1–2 neutral sites (Wikipedia, YouTube) for the most realistic session history. Example warmup chain: facebook.com → youtube.com → yoursite.com
✓ PROS
  • Traffic referrer shows as Social in Google Analytics
  • Browser has real social media cookies from the session
  • Huge share of real web traffic comes from social — this mirrors it
  • Different platforms = diverse referral mix (looks authentic)
  • Especially effective for AdSense — social traffic is premium quality
✗ CONS
  • Social media sites load more JavaScript than Wikipedia — slightly slower warmup
  • Adds a few extra seconds per visit
  • Some social sites may block headless browsers — the visit still registers as loading the domain
SHOULD I USE SOCIAL MEDIA WARMUP?
YES You want Social / Facebook or Social / Reddit showing in your analytics referrers
YES Your site is in a niche where social traffic is normal (lifestyle, news, entertainment)
YES You want the most realistic-looking session history possible
NO Your site only gets search traffic — social referrers would look suspicious in your analytics
NO You need maximum visit speed — social warmup adds 3–6 seconds

How to set up Social Media Warmup

  1. Go to Human Emulation tab → make sure Browser Warmup Visit toggle is ON
  2. Go to Settings tab → scroll to Warmup Customisation
  3. In the Custom Warmup URLs field, enter your social platforms one per line:

https://www.facebook.com
https://www.reddit.com
https://www.youtube.com

  1. Optionally add a social-style search term in Custom Warmup Keywords — something the user might have searched on social media before arriving: best vpn deal, vpn for netflix
  2. Click Save Settings
  3. GhostRoute now visits your listed social sites before every target visit — automatically
⚠️
Match warmup sources to your real traffic mix. If your site normally gets 0% social traffic but suddenly 40% of analytics shows Social / Facebook — that's an anomaly that analytics monitoring can flag. Keep social warmup as a portion of visits, not 100% of them. A realistic mix might be 30% social warmup, 40% organic search, 30% direct.
Drip-Feed Mode

Spread traffic naturally throughout the day instead of sending it all at once

When Drip-Feed is ON, GhostRoute adds a random 5–10 minute delay between each batch of visits. Instead of 100 visits hitting your site in 30 minutes, they arrive gradually over hours — like real organic traffic would.

✓ PROS
  • Traffic patterns look completely natural
  • Essential for AdSense accounts — burst traffic triggers IVT flags
  • Matches real-world traffic spread over the day
  • Safer for long-term use
✗ CONS
  • Campaign takes much longer to complete
  • App must stay open/running the whole time
  • Not useful if you need fast results
SHOULD I USE DRIP-FEED?
YES Your site has AdSense or display advertising
YES You're running more than 50 visits
YES You want long-term safe traffic
NO You need all visits done in under an hour
NO You're just testing with a small visit count

How to use Drip-Feed

  1. Go to Human Emulation tab
  2. Toggle Drip-Feed Mode to ON — or select the AdSense Safe preset which enables it automatically
  3. Click Save Settings
  4. Launch your campaign normally — GhostRoute adds 5–10 minute random gaps between visit batches automatically
  5. The campaign will take much longer to complete. Leave the app open and running.
Human Emulation

Every setting that controls HOW the bot behaves on your site

These settings are in the Human Emulation tab. They apply to all campaigns. After changing, click 💾 Save Settings.

How to use Human Emulation

  1. Click Human Emulation in the sidebar
  2. In Core Behavior: toggle each feature ON or OFF using the toggle switches. Changes take effect on the next campaign.
  3. In Mouse & Typing: drag the sliders to set mouse speed, hover pause, text select probability, typing delay, typo rate, and max idle time
  4. In Dwell & Session: set min/max page wait, bounce rate, ad dwell times, inner page dwell, warmup dwell, and tab idle time
  5. In Organic Search: enter your keywords and set the Google/Bing/DuckDuckGo split sliders (only if Organic Search toggle is ON)
  6. Click Save Settings at the bottom — settings persist between sessions

Core toggles quick reference

ToggleWhat it doesDefaultKeep ON?
Simulate Human ClicksCurved Bezier mouse movement instead of instant teleportingONAlways
Auto-Scroll PagesScrolls through page during visit — boosts time-on-pageONYes
Ghost CursorNatural mouse path algorithm — defeats mouse pattern detectionONAlways
Cookie Banner AcceptAuto-dismisses GDPR cookie popupsONYes
Browser Warmup VisitVisits neutral sites first to build historyONYes (unless debugging)
Inner Page NavigationClicks internal links — reduces bounce rateONYes
Persona PersistenceReuses browser profile per proxy — looks like returning userONYes
Randomize URL OrderShuffles URL list — prevents detectable patternsONYes
Desktop NotificationsWindows alerts when campaign ends or errors occurONOptional
Tab SwitchingOpens dummy tab and idles — lengthens sessionOFFOptional
Drip-Feed ModeAdds delays between batches — spreads traffic over timeOFFAdSense: Yes

Mouse & Typing settings

SettingWhat it doesDefault
Mouse SpeedSlow = elderly user profile. Medium = average. Fast = power user. Affects hover pause times.Medium
Hover PauseHow long cursor stops over elements before moving800–2500 ms
Text Select ProbabilityChance bot randomly highlights text — adds engagement signal50%
Typing DelayPause between keystrokes when filling forms or search boxes. 100–200ms = human speed.150 ms
Typo Rate% chance of typing wrong character and correcting it. Mimics real human error rate.7%
Max IdleMaximum seconds to pause between actions30 s

Dwell & session times — plain English

SettingWhat it means in simple wordsDefault
Min / Max WaitHow many seconds the visitor spends reading your page before leaving. 3–8 seconds = a quick reader. Increase to 15–30 seconds for longer engagement signals.3–8 s
Bounce RateIn the real world, some visitors open a page and immediately leave without clicking anything — this is called a "bounce". Set to 30% means 30 out of 100 visits leave quickly. Real sites have 40–70% bounce rate. This setting makes your traffic look real by including some short visits. Do not set to 0% — zero bounce rate is suspicious.30%
Bounce DwellHow long a "bounce" visitor stays before leaving. 5–10 s = they opened the page, glanced at it, then left. Realistic.5–10 s
Ad DwellHow many seconds the visitor's mouse moves around the ad area on your page. Higher = Google sees longer ad visibility time = better impression quality.25–55 s
Ad HoverHow long the cursor stops directly on top of an ad banner. 1–2.5 seconds = cursor paused on it, simulating a user noticing the ad.1–2.5 s
Inner Page DwellWhen the visitor clicks a link to another page on your site, how long do they stay on that sub-page before coming back or leaving.1.5–3.5 s
Warmup DwellHow long the bot spends on each warmup site (e.g. Wikipedia) before visiting your site. Enough to load cookies and look like a real session, but not so long it wastes time.2–4 s
Tab Idle TimeWhen Tab Switching is ON, the visitor opens a second tab and idles there for this many seconds before coming back to your site — mimicking someone who opened a second tab to check something.8–20 s
Inner Visit ProbOut of all visits that have Inner Page Navigation ON, what percentage actually click a sub-page link. 60% means 6 out of 10 visits will click into a sub-page. The other 4 just read the main page and leave.60%
Ghost Cursor

The physics-based mouse movement engine

Ghost Cursor is the library that controls how the mouse moves. Instead of teleporting the cursor instantly (obvious bot behaviour), it draws natural curved paths with acceleration and deceleration — the way a human hand actually moves a mouse.

✓ PROS
  • Defeats canvas-based mouse fingerprinting
  • Passes bot detection that analyses mouse movement patterns
  • Generates unique path for every move — no two visits identical
  • Works at all mouse speed settings
✗ CONS
  • Adds small amount of time per interaction
  • Very slightly slower than instant-click bots
SHOULD I TURN THIS OFF?
NO Almost never — keep Ghost Cursor ON at all times
ONLY Turn OFF if debugging a specific click issue and need to isolate the problem

How to use Ghost Cursor

  1. Go to Human Emulation tab → Core Behavior
  2. Make sure Ghost Cursor toggle is ON (it is ON by default)
  3. Set your preferred Mouse Speed in the Mouse & Typing section: Slow = elderly profile, Medium = average, Fast = power user
  4. Adjust Hover Pause range — how long cursor lingers over elements before moving on
  5. Click Save Settings — Ghost Cursor is now active on all future visits automatically
Fingerprint Generator v4.1.0

Generates a believable, unique browser identity for every session — fully automatic

What is the Fingerprint Generator?

Every browser exposes dozens of data points — screen resolution, installed fonts, GPU model, audio hardware, language settings, timezone, and more. Together these form a "fingerprint" that identifies a device uniquely. Headless browsers have obvious, consistent fingerprints that bot-detection systems recognise instantly.

GhostRoute's Fingerprint Generator (powered by fingerprint-generator) creates a realistic, internally consistent fingerprint for each session — matching real device combinations that actually exist in the wild. Every visit gets a different fingerprint, making sessions appear to come from entirely different devices.

This is fully automatic — you don't configure anything. It runs on every session.

What it spoofs

SignalWhat happens
Screen resolutionSet to realistic values (1920×1080, 1366×768, 2560×1440, etc.) matching the device profile
Device memorynavigator.deviceMemory set to 4GB, 8GB, or 16GB based on profile
Hardware concurrencyCPU core count matched to device profile (4, 8, 12, 16 cores)
Browser pluginsRealistic plugin list for the selected browser version
Language & localeMatched to proxy's country code — US proxy gets en-US, DE proxy gets de-DE
User-Agent headerConsistent Chrome version across all browser properties (not just the UA string)
Viewport sizeRealistic window size matching the screen resolution
✓ WHY THIS MATTERS
  • Sites like Cloudflare cross-check 30+ fingerprint signals against each other
  • Inconsistent fingerprints (e.g. wrong GPU for an OS) instantly flag bots
  • Unique fingerprint per session = every visit looks like a different person
  • Locale matching proxy country is critical — mismatch is a major IVT signal
ℹ INFO
  • Runs automatically — no settings needed
  • Works alongside Stealth Plugin and Ghost Cursor
  • Canvas Noise / WebGL Spoof add further randomisation on top of the base fingerprint

How to use / verify Fingerprint Generator

Fingerprint Generator runs automatically on every session — there is nothing to configure. To verify it is working:

  1. Run a Test Visit (Campaigns tab → 🧪 Test Visit)
  2. In the diagnostic report, check the Fingerprint row — it should show a unique device profile (OS, Chrome version, screen resolution, GPU)
  3. Run a second Test Visit — the fingerprint values should be different from the first run
  4. If you see identical fingerprints across runs, ensure Stealth Plugin is ON in Settings
Session Tiredness Engine v4.1.0

Simulates natural human fatigue as a browsing session progresses — fully automatic

What is Session Tiredness?

Real users don't browse at the same pace from the first click to the last. They start alert, then slow down as they read, think, or get distracted. Bots, by contrast, operate at perfectly constant speed — which is one of the easiest patterns for bot-detection systems to flag.

The Session Tiredness engine introduces a gradual, natural slowdown into each visit. As time passes within a single session, actions take slightly longer — pauses between scrolls grow, hover durations increase, mouse movements become less decisive. The effect is subtle but measurable in behavioural analytics.

This is fully automatic — no configuration needed. It activates on every session.

How tiredness is applied

BehaviourEarly sessionLate session
Scroll pauseBaseline (700–1800 ms)Baseline × 1.2–1.5 (up to 2700 ms)
Hover durationBaseline (800–2500 ms)Slightly extended — lingers longer on elements
Between-action idleShort random pausesLonger, more frequent idle moments
Mouse speedMatches Mouse Speed settingMarginally slower — deliberate movement
Typing delayBaseline (150 ms)Slightly slower, higher typo rate
ℹ️
The slowdown is subtle. It won't make campaigns significantly slower — total session time increases by only a few seconds. The purpose is to defeat behavioural-consistency detectors, not to add noticeable delay.

How to use / observe Session Tiredness

Session Tiredness is fully automatic — it activates on every session with no configuration needed. To see it in action:

  1. Turn Headless OFF in the Campaigns tab (debug mode — browser window is visible)
  2. Run a Test Visit or short campaign
  3. Watch the browser window — early in the session actions are crisp, later actions have slightly longer pauses between them
  4. Turn Headless back ON for production campaigns
Persona Persistence

Reuse browser profiles to simulate returning visitors

When Persona Persistence is ON, GhostRoute saves the browser profile (cookies, localStorage, cached data) for each proxy and reuses it on future visits. Your site sees the same "person" returning — with existing cookies and session history — rather than a brand new browser every time.

✓ PROS
  • Returning visitor signals improve credibility
  • Cookies from previous visits are present — looks real
  • Reduces new-session anomaly detection
  • Better engagement metrics over time
✗ CONS
  • Uses disk space to store profiles (50 profiles by default)
  • If a profile gets flagged, that proxy/profile combo stays flagged
  • Slightly slower first load per new proxy
SHOULD I USE PERSONA PERSISTENCE?
YES Long-term campaigns where returning visitors matter
YES AdSense campaigns — returning visitors are valued by Google
NO One-time bulk traffic run where you don't care about return visits

How to use Persona Persistence

  1. Go to Human Emulation tab → Core Behavior
  2. Toggle Persona Persistence to ON
  3. Click Save Settings
  4. GhostRoute automatically saves a browser profile folder for each proxy IP. On the next visit from the same proxy, it loads the saved profile — cookies, localStorage, and cached data are all present.
  5. Profiles are stored in %APPDATA%\GhostRoute\profiles. You can delete this folder to start fresh profiles for all proxies.
Tab Switching & Idle

Simulate users who multitask between browser tabs

When Tab Switching is ON, the bot opens a second tab (a random website), idles there for 8–20 seconds, then switches back to your site. This mimics users who browse multiple tabs at once — a very natural behaviour that increases total session time.

✓ PROS
  • Increases total session duration significantly
  • Very natural behaviour — most real users multitask
  • Adds engagement signal without suspicious rapid activity
✗ CONS
  • Adds 8–20 seconds to every visit
  • Uses extra proxy bandwidth (loading second tab)
  • Slower campaign completion
SHOULD I USE TAB SWITCHING?
YES You want to maximise average session duration
YES Your analytics shows very short average session times
NO You're running a fast campaign and don't need longer sessions

How to use Tab Switching

  1. Go to Human Emulation tab → Core Behavior
  2. Toggle Tab Switching to ON
  3. In the Dwell & Session section, set Tab Idle Time — how long the bot idles on the dummy tab (default 8–20 s)
  4. Click Save Settings
  5. Alternatively, enable the 🗂️ Tab Switch & Idle step in the Journey Builder — this gives you precise control over where in the journey the tab switch happens
Auto Controls Overview

Everything GhostRoute does automatically — no configuration required

GhostRoute has two layers: Manual Controls (settings you configure) and Auto Controls (things the engine handles on its own every time). This page documents the automatic layer.

💡
Nothing to set up here. These protections and behaviours activate on every campaign automatically. Understanding them helps you explain to clients why GhostRoute traffic looks real.

Automatic stealth protections

ProtectionWhat it does automaticallyWhy it matters
Stealth PluginPatches 20+ headless browser signals on page load: navigator.webdriver, plugin lists, Chrome runtime, permission API, and moreRaw headless Chrome fails basic bot checks. The patch makes it indistinguishable from a regular desktop Chrome installation.
Fingerprint GeneratorCreates a unique, internally consistent device fingerprint per session: screen, GPU, memory, locale, UASites cross-check 30+ signals. A mismatch (e.g. US IP + German locale) is an instant bot flag.
Canvas NoiseInjects invisible pixel variation into HTML5 Canvas output on every renderCanvas fingerprinting reads pixel patterns to identify a browser uniquely. Noise makes every session's canvas output different.
WebGL SpoofRandomises the GPU vendor and renderer strings returned by WebGL APIWebGL is one of the strongest fingerprinting vectors. Consistent GPU data across sessions links them together.
Audio NoiseAdds inaudible variation to AudioContext outputAudio fingerprinting measures the exact floating-point output of the audio stack. Noise ensures every session differs.
Timezone EmulationSets browser timezone to match the proxy's detected countryA US IP with a UTC+5:30 timezone is an obvious mismatch that triggers IVT flags.
WebRTC BlockDisables WebRTC API entirely via browser flagsWebRTC can expose your real IP address even behind a proxy. Disabling it prevents IP leaks.

Automatic visit behaviour

BehaviourWhat happens automaticallyWhy it matters
Ghost CursorEvery mouse move follows a physics-based Bezier curve with natural acceleration and deceleration. No instant teleporting.Mouse movement patterns are a primary bot-detection signal. Straight-line or instant movements fail most advanced detectors.
Session TirednessActions gradually slow as the session ages — longer pauses, slightly slower mouse, extended hover timesBots move at perfectly constant speed. Human speed varies. The tiredness curve matches real behavioural patterns.
Cookie Banner Auto-dismissDetects and clicks common GDPR/cookie consent popups automatically (if enabled in Journey)Bots that ignore cookie banners never load full page content, making bounce rate look artificial.
Browser WarmupVisits 1–3 neutral sites (Wikipedia, YouTube, etc.) before loading the target URLA browser that opens directly on your site has no history — obvious cold-start signal. Warmup builds realistic session context.
Proxy Auto-rotationPicks the next proxy for each visit based on your rotation setting (Round-Robin / Random / Fastest-First)Same IP repeated = detectable pattern. Rotation ensures each visit appears to come from a different person.
User-Agent RotationSelects a different real Chrome User-Agent string from a pool of 200+ for each sessionA repeated UA string across hundreds of visits is a strong bot signal.
Auto-RefillWhen alive proxy count drops below threshold, scrapes and tests a fresh batch mid-campaign (if enabled)Free proxies die constantly. Without auto-refill, campaigns fail silently when the pool empties.
Drip-Feed timingInserts random 5–10 minute gaps between visit batches (if Drip-Feed is ON)Traffic arriving in continuous bursts is the clearest IVT pattern. Natural traffic has peaks, lulls, and gaps.
Organic Search routingOpens Google, Bing, or DuckDuckGo (based on split %), types the keyword, finds your site in results, clicks it (if Organic Search is ON)Direct visits from headless browsers look suspicious. Coming via search provides a legitimate referrer chain. Three engines = natural referrer diversity.

Manual vs Auto — quick reference

YOU CONTROL (Manual)
  • Target URLs and visit count
  • Thread count and headless mode
  • Proxy list and rotation mode
  • Journey steps (which actions, in what order)
  • Drip-Feed ON/OFF
  • Organic Search ON/OFF + keywords
  • Mouse speed, dwell times, bounce rate sliders
  • Scrape type filter (HTTP/HTTPS/SOCKS4/SOCKS5)
  • Scheduler start time and repeat interval
  • Warmup URLs and warmup keywords
  • User-Agent and Referrer selection
  • Ad CTR % (keep at 0 for AdSense)
ENGINE HANDLES (Auto)
  • Ghost Cursor physics on every move
  • Fingerprint generation per session
  • Canvas, WebGL, Audio noise injection
  • WebRTC blocking
  • Timezone matching to proxy country
  • Stealth plugin patches on page load
  • Session tiredness slowdown
  • Cookie banner detection & dismiss
  • Browser warmup site visits
  • Proxy rotation between visits
  • User-Agent rotation per session
  • Auto-refill when proxy pool runs low
  • Drip-Feed delay timing
Analytics

Track and export your campaign performance

The Analytics tab shows your full visit history across all campaigns. Use the date filter to narrow results. Every visit is logged with: timestamp, URL, proxy used, status (success/fail), and session duration.

How to use Analytics

  1. Click Analytics in the sidebar
  2. Use the Date From / Date To filter fields to narrow the date range shown
  3. The table shows all visits: timestamp, URL, proxy used, status (Success / Failed), session duration, and proxy country
  4. Click Export CSV to download the filtered data as a spreadsheet. Open in Excel or Google Sheets for further analysis.
  5. Reports auto-save to %APPDATA%\GhostRoute\reports — you can access past reports there without opening the app

Exporting reports

Click Export CSV to download a spreadsheet. Open in Excel or Google Sheets for custom analysis. Reports are also saved automatically in %APPDATA%\GhostRoute\reports.

Action Recorder

Pro Enterprise — Record your own browsing path and replay it on every visit

What is the Action Recorder?

The Action Recorder lets you manually browse your own website in a real Chrome window while GhostRoute silently records every action you take — every click, scroll, form input, and page navigation. Once you stop recording, GhostRoute saves this as a replayable script. On every future campaign visit, GhostRoute replays your exact recorded path with randomised timing, making each visit unique even though the actions are the same.

Think of it as teaching GhostRoute to browse your site exactly the way you want a visitor to — clicking the things that matter, spending time on the pages that count, interacting with the elements that drive your analytics goals.

What gets recorded

ActionRecorded?Detail
Mouse clicks✓ YesClick target, coordinates, and timestamp. Replayed with Ghost Cursor movement to each target.
Page scrolling✓ YesScroll direction, amount, and speed. Replayed with natural human scroll rhythm.
Link navigation✓ YesFull URL of every page visited. Replayed in same order.
Form typing✓ YesCharacters typed and field targets. Replayed with typing delay and typo simulation.
Time spent on each page✓ YesActual dwell time recorded. Replayed with ±20% random variation to avoid identical timing.
Hover positions✓ YesWhere the cursor lingered. Helps GhostRoute know which elements to mouse-over during replay.
Ad clicks✓ YesIf you click an ad during recording, it is replayed. Use CTR % setting to control frequency instead of clicking during recording.
Video play/pausePartialClick on video player is recorded. Actual video playback state is not guaranteed to match.
File downloads✗ NoDownload actions are skipped during replay — they can't be reproduced safely across different sessions.
Login / authentication✗ Not recommendedCredentials typed during recording are saved in the script file. Avoid recording login flows unless the site is yours.

How to use the Recorder

  1. Go to the Recorder tab (Pro or Enterprise plan required)
  2. Enter your site's URL in the Start URL field if prompted, or leave blank — the campaign's Target URL is used
  3. Click ▶ Start Recording — a Chrome browser window opens
  4. Browse your site naturally: click the links a real visitor would click, scroll through content, hover over ads, navigate to sub-pages. Take your time.
  5. When done, click ■ Stop Recording in the Recorder tab (not the browser window)
  6. Give the recording a name (e.g. "Homepage → Article → CTA click") and click Save
  7. The recording appears in your Saved Recordings list
  8. To use it in a campaign: go to Journey Builder, enable the 📹 Recorded Path step, and select your recording from the dropdown
  9. Click Apply in Journey Builder — the recorded path now runs on every campaign visit
💡
Record like a real user. Don't rush. Pause, read, scroll slowly, move the mouse naturally. The timing you use during recording is what GhostRoute learns — a 3-second pause on a paragraph teaches GhostRoute that visitors read there. A fast click-through teaches it to skip fast. Your behaviour during recording = the template for every replay.

Managing recordings

ActionHow to do it
Rename a recordingClick the recording name in the Saved Recordings list → edit inline → press Enter
Delete a recordingClick the 🗑️ icon next to the recording name
Preview a recordingClick ▶ Preview — GhostRoute replays it in a visible browser so you can see exactly what visitors will experience
Create multiple recordingsYou can have different recordings for different URL patterns (homepage, product page, blog post). Set which one runs via Journey Builder.

Timing randomisation — why no two replays are identical

During replay, GhostRoute does NOT reproduce your exact recorded timing. Instead it applies randomisation on top:

This ensures that even if you run 1000 visits, no two visits have the same exact timing fingerprint — which is what bot detectors look for.

When recordings break — and how to fix them

If your site's layout or HTML structure changes after you made a recording, some click targets may no longer exist at the same location. Signs of a broken recording:

Fix: Delete the old recording and record a fresh one. Recordings are not automatically updated when your site changes — treat them as needing re-recording whenever you make significant layout changes.

✓ WHEN RECORDER IS BETTER THAN JOURNEY BUILDER
  • Your site has a specific, important click path (e.g. article → related post → newsletter signup)
  • You want to click specific ads at specific positions on the page
  • Your site has complex JavaScript interactions (sliders, carousels, expandable sections)
  • You want to simulate a multi-page session with a very specific route
  • The Journey Builder's generic inner-page navigation doesn't click the right links
✗ WHEN JOURNEY BUILDER IS BETTER
  • Simple sites where any click pattern works fine
  • You want GhostRoute to automatically adapt to different pages/URLs
  • You don't want to maintain recordings as the site changes
  • Fast setup — Journey Builder needs no recording time
SHOULD I USE THE RECORDER?
YES You have specific pages you want every visitor to see (product page, ad zone, CTA)
YES Your site has ads in specific positions you want the cursor to hover near
YES You want to simulate a realistic multi-step user journey (landing → article → related post)
NO You just want basic traffic — Journey Builder defaults are sufficient
NO Your site updates frequently — recordings will break and need re-recording
VPS Farm

Enterprise Only — Scale to hundreds of threads by running GhostRoute on multiple remote servers simultaneously

What is VPS Farm?

A VPS (Virtual Private Server) is a remote computer you rent by the hour or month — it runs 24/7 in a data centre. VPS Farm lets you install GhostRoute on multiple VPS servers and control them all from your main PC. Each server runs its own campaign threads, so instead of 50 threads on your local machine, you can have 50 threads on Server A + 50 on Server B + 50 on Server C = 150 total threads, all controlled from one screen.

Your local PC stays fast. GhostRoute on it is just the controller — all the heavy browser work happens on the VPS servers.

What VPS to get — hardware recommendations

Threads per VPSMinimum RAMRecommended CPUDiskEst. cost/mo
10 threads4 GB RAM2 vCPU40 GB SSD~$10–15
20 threads8 GB RAM4 vCPU60 GB SSD~$20–30
50 threads16 GB RAM8 vCPU80 GB SSD~$50–70
100 threads32 GB RAM16 vCPU120 GB SSD~$100–150
💡
Recommended VPS providers: Vultr, Hetzner, DigitalOcean, Linode/Akamai, Contabo (cheapest). Choose a server location close to your target audience — a US-based VPS with US proxies looks the most natural for US traffic campaigns.

Recommended operating system

GhostRoute runs on Windows Server 2019/2022 or Ubuntu 20.04/22.04 LTS. Windows is simpler to set up if you're not familiar with Linux. Ubuntu is cheaper (no Windows licensing fee) and uses less RAM.

How to set up a VPS node — full steps

  1. Rent a VPS from your chosen provider. Select Windows or Ubuntu. Note the server IP address.
  2. Connect to the VPS — use Remote Desktop (RDP) for Windows, or SSH for Ubuntu
  3. Download GhostRoute on the VPS — get the installer or portable exe from ghostroute.io
  4. Activate your Enterprise license on the VPS — your Enterprise plan supports up to 10 devices, so each VPS uses one device slot
  5. Configure GhostRoute on the VPS: add proxies, set target URLs, configure Human Emulation settings as needed
  6. Start the VPS API in GhostRoute on the VPS: go to Settings → VPS Mode → Enable API Server → note the port number (default: 7432)
  7. Open the firewall port on the VPS — allow inbound TCP on the API port (7432 by default) from your local PC's IP
  8. Back on your local PC: go to GhostRoute → VPS Farm tab → click Add Node
  9. Enter the VPS IP address and port → click Connect — status turns green when connected
  10. Repeat steps 1–9 for each additional VPS you want in the farm

Network / firewall requirements

PortDirectionPurpose
7432 (default)Your PC → VPS (inbound on VPS)GhostRoute control API — your local app sends commands to the VPS
80, 443VPS → internet (outbound)Browser traffic — the VPS's Chrome instances need outbound web access
Proxy portsVPS → proxy serverWhatever ports your proxies use (3128, 1080, 8080, etc.)

Launching campaigns on VPS nodes

  1. All connected nodes appear in the VPS Farm tab with status indicators (green = online, red = offline)
  2. Select which nodes you want to include in the campaign by clicking their checkboxes
  3. Configure the campaign (URL, visit count, threads) as normal
  4. Click Launch on Farm — GhostRoute distributes the visit workload across all selected nodes
  5. Progress from all nodes is shown in a unified view — you can see each node's thread count, visit progress, and success rate

Diversity Proxy List

The Diversity Proxy List is a pool of proxies shared across all your VPS nodes. Instead of each node using its own proxies, the farm draws from this shared pool — ensuring no two nodes use the same proxy IP at the same time. This prevents duplicate IP visits across your farm.

Import from Proxy Manager v4.1.0

Click ↓ Import from Proxy Manager above the diversity proxy textarea — GhostRoute pulls all proxies with status OK from your Proxy Manager and fills the diversity list in one click.

✓ PROS
  • Massive scale — 500+ threads across multiple servers
  • Your local PC stays fast — all browser work happens on VPS
  • Different server geolocations = different IP ranges naturally
  • 24/7 operation — VPS runs even when your PC is off
  • Central control — manage every node from one screen
  • Diversity proxy pool prevents IP overlap between nodes
✗ CONS
  • VPS rental cost is additional (~$10–150/mo per server)
  • Enterprise plan required (one device slot per VPS)
  • Initial setup takes 30–60 minutes per server
  • Linux VPS requires some command-line knowledge
SHOULD I USE VPS FARM?
YES You need more than 50 threads — your local machine can't handle that many browsers
YES You want 24/7 continuous campaigns without keeping your PC on
YES You're running campaigns for multiple client sites simultaneously
NO 50 threads locally is enough for your volume — VPS adds cost without benefit
NO You're on a Trial or Pro plan — VPS Farm is Enterprise only
Settings

Global defaults — apply to all campaigns unless overridden per-campaign

How to use Settings

  1. Click Settings in the sidebar
  2. In Stealth & Fingerprinting: review all toggles — leave them ON unless debugging a specific issue
  3. In User-Agent & Referrer: choose UA rotation mode and default referrer source
  4. Click Session Config ▸ to expand the collapsible — adjust threads, delay, CTR, rotation, auto-refill
  5. In Warmup Customisation: enter custom warmup URLs and keywords, or leave blank for defaults
  6. Scroll to License to view your plan details, activate a new key, or deactivate a device
  7. Click Save Settings at the bottom — all settings persist between app restarts

Stealth & Fingerprinting

All stealth protections are ON by default. Do not turn any of these off unless you are debugging a specific issue.

User-Agent & Referrer

SettingOptionsDefault
User-Agent RotationRotate (200+ real UAs) / Chrome Win / Chrome Mac / Firefox / Safari iOS / AndroidRotate
Default ReferrerGoogle / Bing / Facebook / Twitter / Reddit / Instagram / Direct / RandomGoogle

Session Config

SettingDescriptionDefault
Concurrent ThreadsGlobal default. Overridden per-campaign. Max depends on plan (Trial: 3, Pro: 10, Enterprise: 50)3
Delay Between URLsGap between launching each new visit2000 ms
Ad CTR %Global default. Always 0 for AdSense sites.0%
Proxy RotationRound-Robin (ordered) / Random / Fastest-FirstRound-Robin
Each URL × Every ProxyVisit every URL from every proxy. Multiplies total visits (URLs × Proxies).OFF
Proxy Scrape Batch SizeHow many proxies to fetch per scrape100
Auto-RefillAuto-scrape when alive proxies drop below thresholdOFF
Refill ThresholdTrigger refill when alive count falls below this number20

Warmup Customisation

FieldDescriptionDefault
Custom Warmup URLsSites to visit before target. One per line. Leave blank for auto defaults.Wikipedia, YouTube, BBC, Reddit
Custom Warmup KeywordsDecoy search terms typed before target visit. Leave blank for random built-in queries.Random built-in

Session Config (collapsible) v4.1.0

In v4.1.0 the Session Config block is now collapsible — click the Session Config ▸ header to expand or collapse it. This keeps the Settings page clean when you don't need to change session parameters. All settings inside work exactly as before.

License & Account v4.1.0

Your account plan details (plan name, devices, expiry) are now shown directly in the Settings page rather than the sidebar. To activate a new key or deactivate a device, scroll to the License card inside Settings.

Dark / Light Theme v4.1.0

Switch the entire app UI between dark and light mode

How to toggle the theme

Click the 🌙 / ☀️ button in the top bar of the app (between the window title and the window controls). The icon switches between moon (dark mode) and sun (light mode). Your preference is saved automatically and restored the next time you open GhostRoute.

ModeBackgroundBest for
Dark (default)Deep blue-blackLow-light environments, long sessions, less eye strain at night
LightSoft lavender-whiteBright rooms, sharing your screen, users who prefer light UIs
💡
Theme preference is persisted. Closing and reopening the app remembers your last choice — you don't need to toggle every time.

How to switch theme

  1. Look at the top bar of the GhostRoute app window — between the window title and the window control buttons (minimise, maximise, close)
  2. Click the 🌙 button to switch to light mode. The icon changes to ☀️
  3. Click ☀️ to switch back to dark mode
  4. The theme applies instantly — no restart needed
  5. Your choice is saved automatically
Stealth & Fingerprinting

How GhostRoute hides that it's a bot

Every browser has a unique "fingerprint" — a set of properties that identify it. Headless Chrome (what bots use) has obvious fingerprints that sites can detect. GhostRoute patches all of them.

ProtectionWhat it doesDefault
Stealth PluginPatches 20+ headless browser signals: navigator.webdriver, browser plugins list, language settings, and more. Core protection — always keep ON.ON
Canvas NoiseAdds invisible pixel noise to HTML5 Canvas. Every session produces a different canvas fingerprint — defeats canvas tracking.ON
WebGL SpoofRandomises GPU model name returned by WebGL API. Sites use GPU info to fingerprint devices.ON
Audio NoiseAdds inaudible noise to AudioContext. Each session has unique audio fingerprint.ON
Timezone EmulationSets browser timezone to match proxy's country. Timezone mismatch with IP is a major bot signal.ON
WebRTC BlockDisables WebRTC API completely. Without this, sites can discover your real IP even behind a proxy.ON
🚫
Never disable stealth protections for production campaigns. They work together — disabling even one can expose your bot traffic.

How to manage Stealth protections

  1. Go to Settings tab → Stealth & Fingerprinting section at the top
  2. All six protections are ON by default — leave them all ON for every production campaign
  3. If you need to debug a click or interaction issue, temporarily turn a single protection OFF, run a Test Visit, then re-enable it
  4. Click Save Settings after any change
  5. To verify protections are working: run a Test Visit and check the stealth score in the diagnostic report — score should be 80+
⚠️
Disclaimer: Even with all stealth protections active, no tool can guarantee 100% undetectability against every bot-detection system at all times. Detection technology evolves continuously. GhostRoute is designed to be indistinguishable from real traffic under standard detection methods, but results depend heavily on proxy quality — especially for AdSense campaigns.
Default Values Reference

All factory default settings in one place

SettingDefault
Concurrent Threads3
Delay Between URLs2000 ms
Min Page Wait3000 ms
Max Page Wait8000 ms
User-Agentrotate
Referrergoogle
Proxy Rotationround-robin
Headless ModeON
Ad CTR %0%
Drip-FeedOFF
Organic SearchOFF
Google / Bing / DuckDuckGo Split60% / 25% / 15%
Bounce Rate30%
Bounce Dwell5–10 s
Mouse Speedmedium
Hover Dwell800–2500 ms
Text Select Probability50%
Typing Delay150 ms
Typo Rate7%
Max Idle30 s
Scroll Steps Max5
Scroll Amount150–550 px
Scroll Pause700–1800 ms
Ad Dwell25–55 s
Ad Hover1000–2500 ms
Inner Page Dwell1500–3500 ms
Inner Visit Probability60%
Warmup Dwell2000–4000 ms
Tab Idle8–20 s
Page Timeout60 s
Proxy TCP Check Timeout8 s
Proxy HTTP Check Timeout10 s
Proxy Scrape Batch100
Auto-Refill Threshold20 proxies
Stealth PluginON
Canvas NoiseON
WebGL SpoofON
Audio NoiseON
Timezone EmulationON
WebRTC BlockON
FAQ

Common questions answered in plain English

Is GhostRoute detectable?

GhostRoute uses the same Chromium engine as a real user's browser with all detectable signals patched. With elite residential proxies, traffic is statistically indistinguishable from organic visits.

What proxies do I need for AdSense?

Paid residential proxies with Elite safety score (fraud score 0–20). Free proxies are shared datacenter IPs that Google's IVT system flags easily. For AdSense use: always use paid residential.

How many visits should I start with?

Always start with 10–50 visits to test. Once confirmed working, scale up gradually. For AdSense, stay within 5–15% of your natural daily traffic to avoid anomaly detection.

Does it run in the background?

Yes. With Headless Mode ON, all browsers run invisibly. Your PC must stay on and connected. You don't need to keep the GhostRoute window focused.

Can I run multiple campaigns at once?

One campaign at a time locally. Use VPS Farm (Enterprise) to run parallel campaigns across multiple servers simultaneously.

The Test Visit failed — what do I do?

Check the Issues section in the diagnostic report. Common fixes: replace the proxy (most common), check your URL is correct, try turning Headless OFF to watch what happens, try Stealth Max preset if site is blocking bots.

Where is my data stored?

Everything is stored locally on your PC at %APPDATA%\GhostRoute. Only license validation requests go to our servers. Your URLs, proxies, and campaign data never leave your machine.

Is there a refund policy?

Due to the digital nature of the product and the availability of a fully-featured 3-day free trial, all purchases are final once a license key is activated.

What changed in v4.1.0?

v4.1.0 added: Dark/Light theme toggle, proxy scrape type filter (HTTP/HTTPS/SOCKS4/SOCKS5 pills), Fingerprint Generator for per-session device fingerprints, Session Tiredness engine for natural fatigue simulation, Campaign Scheduler (Enterprise), VPS Import from Proxy Manager button, collapsible Session Config in Settings, license widget moved to Settings page, +1pt font size, and faster proxy test timeouts (TCP: 8 s, HTTP: 10 s). See the What's New section for the full list.

Proxy testing is slow — how do I speed it up?

As of v4.1.0, TCP check timeout was reduced from 15 s to 8 s and HTTP check from 20 s to 10 s. Dead proxies now fail faster, making batch testing noticeably quicker. Additionally, use the Scrape Type Filter to scrape only the proxy protocol you need — smaller, targeted batches test faster than mixed ALL batches.

Why does the app look different after an update?

v4.1.0 moved the account/license widget from the sidebar to the Settings page, and removed the version tag from the sidebar. The sidebar is now cleaner. Your license and plan info is still there — go to Settings → License.

📧
Still need help? Email support@ghostroute.io — we respond within 24 hours.