Plain English explanation — no technical knowledge required
GhostRoute is a Windows desktop application that sends real, human-looking traffic to your website. Instead of fake bot traffic that gets detected and filtered, GhostRoute opens a real Chrome browser, visits warmup sites, searches Google, and then lands on your page — just like a real visitor would.
Think of it like hiring hundreds of virtual visitors who browse your site naturally — they scroll, move the mouse, click links, and spend time on your pages.
Every improvement shipped in this release
New features
UI & performance improvements
- Session Config collapsible — Settings page now has a collapsible Session Config section to reduce clutter
- License widget in Settings — Account plan details moved from sidebar to Settings page for a cleaner sidebar
- Human Emulation 2-column layout — Core Behavior toggles now displayed in a space-efficient 2-column grid
- Font size +1pt — All UI text increased by 1pt for better readability on high-DPI displays
- Faster proxy testing — TCP check timeout reduced from 15 s to 8 s; HTTP check reduced from 20 s to 10 s. Batch testing is noticeably faster.
- Sidebar scrollable — Sidebar nav now scrolls independently so all links are reachable on small screens
Works on Windows 10 and Windows 11 (64-bit only)
Step-by-step install
- Download GhostRoute Setup 4.1.0.exe from ghostroute.io
- Run the installer. Choose your install folder (default is fine).
- A shortcut is created on your Desktop and Start Menu automatically.
- Open GhostRoute — your 3-day free trial starts immediately, no sign-up needed.
- First launch will download Chromium browser files (~150 MB). Wait for it to finish.
Portable version (no install needed)
Download GhostRoute 4.1.0.exe (portable), put it anywhere on your PC, and run it directly. No installation required. Settings are still saved between sessions.
How to uninstall
Go to Control Panel → Programs → GhostRoute → Uninstall. Your data (proxies, URLs, settings) stored in %APPDATA%\GhostRoute is not deleted — delete that folder manually if you want a clean removal.
Start for free — upgrade when you're ready
Free Trial
You get a full 3-day free trial automatically. No credit card, no sign-up. The trial is tracked on our servers — closing the app or reinstalling does NOT reset it.
How to activate your license key
- Purchase a plan at ghostroute.io
- You'll receive a key like
XXXX-XXXX-XXXX-XXXXby email - In the app sidebar, enter your email and paste the key
- Click Activate License (internet required)
- Done — your plan upgrades instantly
Moving to a different PC
Go to Settings → License → Deactivate Device. This frees your slot so you can activate on a new machine. Pro = 3 devices, Enterprise = 10 devices.
Get your first campaign running fast
- Add Proxies — Go to Proxy Manager → click Scrape Free Proxies. Wait for tests to finish. You need at least 3–5 working proxies.
- Enter your URL — Go to Campaigns → type your website address in the Target URL field (must start with
https://). - Pick a Preset — Click AdSense Safe if you have ads on your site, or SEO Traffic for general traffic boost.
- Set visits to 10 — Always start small to test first.
- Run Test Visit — Click 🧪 Test Visit. This runs ONE visit and shows you a full diagnostic report. Check for any errors.
- Launch — Click 🚀 Launch Campaign. Watch the log and traffic chart update in real time.
Your real-time control centre
The dashboard shows you everything happening right now. You don't need to configure anything here — it's purely for monitoring.
How to use the Dashboard
- Click Dashboard in the sidebar — this is the home screen shown on launch
- During a campaign: watch the Live Stats Bar for active threads, visit count, and success rate updating in real time
- Watch the Live Traffic Chart — each peak shows a batch of visits. A flat line means the campaign is idle or stopped.
- Click Clear in the System Log to reset the log output at any time (log is not saved to disk)
- Add or edit target URLs directly in the URL Manager widget — changes apply to the next campaign
| Widget | What it shows |
|---|---|
| Live Stats Bar | Active Threads, Visits Today, Success Rate, Proxies Available — updates every second during a campaign |
| Live Traffic Chart | Rolling 12-minute chart of visits per minute. Flat line = campaign idle or stopped. |
| Current Proxy | The proxy being used right now: IP, country, type, fraud score |
| System Log | Timestamped log of all events. Click Clear to reset. Not saved to disk. |
| URL Manager | Add/edit/delete your target URLs. Same list used by Campaigns. |
Configure, launch, and monitor traffic campaigns
How to launch a campaign
- Click Campaigns in the sidebar
- Enter your website address in Target URL — must start with
https:// - Choose a Preset (AdSense Safe, SEO Traffic, Stealth Max, or Custom)
- Set Total Visits — start with 10 for your first test
- Set Threads — how many browsers run at once. Must be ≤ number of working proxies.
- Toggle Headless ON (invisible) or OFF (visible browser window for debugging)
- Click 🧪 Test Visit first — runs one visit and shows a full diagnostic. Fix any issues before proceeding.
- Click 🚀 Launch Campaign — monitor progress in the live stats bar and system log
- Click ■ Stop Campaign at any time to pause. Active browsers finish their current visit before closing.
Campaign settings explained (plain English)
| Setting | What it means in simple words | Default |
|---|---|---|
| Target URL | Your website address. Copy it from your browser address bar and paste here. Must start with https:// — if your site is http://, it won't work. | — |
| Total Visits | How many people (browsers) you want to send. Setting 100 means 100 separate browser sessions open, browse, and close — same as 100 people visiting your site. | 10 |
| Threads | How many people visit at the same time. Think of it like lanes on a highway — 3 threads = 3 browsers running in parallel right now. More threads = campaign finishes faster, but you need one working proxy per thread. If you have 5 working proxies, max threads = 5. | 3 |
| Ad CTR % | What percentage of visitors click an ad on your site. Set to 0 = nobody clicks ads (safe, impressions only). Set to 5 = 5 out of every 100 visitors will click an ad. If your site uses Google AdSense, ALWAYS keep this at 0. | 0% |
| Drip-Feed | Instead of sending all 100 visits in 30 minutes, Drip-Feed spreads them over hours — 5–10 minute gaps between batches. Real human traffic doesn't all arrive at once. ON = safer for AdSense. OFF = faster campaign completion. | OFF |
| Headless Mode | ON = Chrome browsers open and run completely invisible in the background. You won't see anything — the campaign runs silently. This is the normal mode for production. OFF = you can actually see the Chrome browser windows opening and browsing. Use this to watch what's happening if something goes wrong (debug mode). Turn OFF only for testing, then turn back ON. | ON |
How visits work (step by step)
- GhostRoute picks a proxy from your pool and connects
- Opens a real Chrome browser with stealth protections active
- Visits warmup sites (Wikipedia, Google, etc.) to build session history
- If Organic Search is ON — searches your keyword on Google, clicks your result
- Lands on your target URL and performs the Journey (scroll, hover, click links)
- Closes the browser, marks visit as success, moves to next proxy
Stopping and Reports
Click ■ Stop Campaign at any time — active browsers finish their current visit before closing. After completion, click 📋 View Reports to see all past campaigns with CSV export.
One-click configurations for common use cases — best starting point for beginners
How to apply a Preset
- Go to Campaigns tab
- Find the Preset dropdown or preset buttons
- Click the preset that matches your use case (see descriptions below)
- The preset immediately updates all related settings (threads, dwell times, drip-feed, organic search, stealth level)
- You can still fine-tune individual settings after applying a preset — the preset is a starting point, not a lock
- Select Custom to stop any preset from overriding your manual settings
Conservative settings designed to pass Google's Invalid Traffic detection. Safe to use on AdSense-monetised sites.
- Safest preset for AdSense accounts
- Drip-feed spreads traffic naturally
- Low thread count avoids burst detection
- Long dwell times = better engagement signals
- Slowest — visits take longer
- Fewer visits per hour due to delays
- Not suitable for high-speed traffic needs
Simulates visitors who found your site through Google, Bing, or DuckDuckGo search. Sends strong organic referrer signals to your analytics.
- Looks 100% organic to Google Analytics
- Boosts click-through rate signals
- Realistic session depth with inner pages
- Multiple keyword rotation supported
- Slower than direct traffic (adds search step)
- Needs a valid search keyword configured
- Site must rank on Google for keyword to work naturally
Maximum stealth settings. All fingerprint protections on, slowest mouse speed, maximum randomisation. Use for sites with Cloudflare or other bot detection.
- Hardest to detect of all presets
- Works on heavily protected sites
- Every session looks unique
- Slowest visits — very deliberate mouse movement
- Uses more proxy bandwidth per visit
- Overkill for basic sites
All settings remain exactly as you configured them. No values are changed. Use this after you've tuned the settings manually.
Design exactly what each visitor does on your site
The Journey Builder lets you drag and drop actions into an order. Each action runs in sequence during every visit. Toggle any step on or off. Click 💾 Apply to save.
How to use Journey Builder
- Click Journey Builder in the sidebar
- Each step has a toggle switch — click it to enable or disable that step
- Drag steps up or down to change the order they execute during a visit
- For steps with parameters (e.g. Inner Page Visit has a depth setting, Ad Click has a CTR %), click the step to expand its settings
- Click 💾 Apply to save — the journey is used on the next campaign launch
- The saved journey applies to all URLs in your campaign equally
| Step | What it does | Default |
|---|---|---|
| 🍪 Accept Cookies | Auto-clicks cookie consent popups (GDPR banners). Prevents the bot getting stuck on accept screens. | ON |
| 🖱️ Human Mouse | Moves the cursor in natural curves, hovers over elements, randomly selects text. | ON |
| 📜 Auto Scroll | Scrolls through the page in steps. Increases time-on-page and engagement signals. | ON |
| ⏱️ Smart Wait | Waits a realistic amount of time based on page content before leaving. | ON |
| 🔗 Inner Page Visit | Clicks an internal link and visits a sub-page. Makes the visit look like real browsing. Parameter: depth (1–3 pages deep). | ON (depth 1) |
| 🗂️ Tab Switch & Idle | Opens a dummy tab, waits, then returns to your site. Mimics a user multitasking. | OFF |
| 💰 Ad Click CTR | Clicks a Google Ad. Set CTR % parameter. Never use on your own AdSense site. | OFF (0%) |
- Site has cookie banners — keep Accept Cookies ON
- You want lower bounce rate — enable Inner Page Visit
- You want longer sessions — enable Tab Switch
- Non-AdSense ad network — enable Ad Click with low %
- Fast testing — remove all except Smart Wait
- Site doesn't have inner links — disable Inner Page Visit
- AdSense site — keep Ad Click OFF always
Set campaigns to start automatically at a specific time — no babysitting required
The Scheduler lets you define a campaign start time and optionally a repeat interval. At the scheduled time, GhostRoute automatically triggers the campaign with your saved settings — even if you're not at your computer.
This is a manual control: you decide the time, the target URL, and the visit count. The engine handles the rest automatically.
How to set up a scheduled campaign
- Go to the Scheduler tab (Enterprise plan required)
- Select the Target URL from your URL list
- Set the Start Time — date and time the campaign should begin
- Set Visit Count and Threads as you would for a manual campaign
- Optionally enable Repeat and choose a daily or weekly interval
- Click Schedule — the entry appears in the queue. GhostRoute fires it at the set time.
Why use the Scheduler?
Traffic patterns that perfectly match your audience's waking hours look far more natural than campaigns run at arbitrary times. With the Scheduler you can:
- Send traffic during peak hours for your target audience's timezone
- Run overnight campaigns while you sleep — your PC just needs to stay on
- Spread daily traffic across the entire day for AdSense safety without manual intervention
- Set a repeating daily campaign and forget about it
- Fully automated — no manual launch needed
- Time campaigns to match real audience hours
- Daily repeat for ongoing traffic
- Pairs well with Drip-Feed for all-day natural spread
- PC must remain powered on and connected
- Enterprise plan required
- One campaign runs at a time (use VPS Farm for parallel)
Always test before launching — catches problems before they waste your proxies
Click 🧪 Test Visit in the Campaigns tab. GhostRoute runs a single full visit and generates a detailed report.
What the report shows
| Section | What it means |
|---|---|
| Timeline | Every step of the visit with time taken: proxy connect → warmup → page load → actions → exit. Green = passed, Red = failed. |
| Issues Found | List of problems: slow proxy, CAPTCHA detected, page timeout, JS errors on target. Each issue has a fix suggestion. |
| Overall Score | 0–100 stealth score. 80+ = good to launch. 60–80 = acceptable. Below 60 = fix issues first. |
- Proxy connected in under 3 seconds
- Page loaded successfully
- No bot detection triggered
- All journey steps completed
- Proxy timeout — replace with faster proxy
- CAPTCHA detected — use better residential proxy
- Page not found — check your URL is correct
- Journey step failed — site structure may have changed
How to run a Test Visit
- Make sure you have at least 1 working proxy in Proxy Manager (status: OK)
- Go to Campaigns tab → enter your Target URL
- Click 🧪 Test Visit (not Launch — just the test button)
- A single browser session runs with full logging enabled
- When it finishes, the diagnostic report opens automatically. Review each section:
- Green rows = passed. Red rows = problem found. Each red row shows a fix suggestion.
- Check the Overall Score: 80+ means you're good to launch. Below 60 — fix the issues first.
- Only after Test Visit passes cleanly, click 🚀 Launch Campaign for the full run
Every visit needs a different IP — proxies make this happen
A proxy is a server that routes your traffic through a different IP address. GhostRoute needs proxies so each visit appears to come from a different real person in a different location.
Adding proxies
| Method | Best for | How |
|---|---|---|
| Scrape Free | Getting started, testing | Click Scrape Free Proxies. Pulls from 12 sources and tests automatically. Use the type filter pills to restrict which protocols are scraped. |
| Paid Proxies | AdSense campaigns, serious use | Enter your provider credentials. Generates authenticated proxy URLs. |
| Manual Add | Adding specific proxies you own | Enter host:port or host:port:user:pass, select type. |
| Bulk Import | Large proxy lists | Paste multiple proxies (one per line) via Batch Add. |
How to use Proxy Manager
- Click Proxy Manager in the sidebar
- Select your proxy type filter pills at the top (or leave on
ALL) - Click Scrape Free Proxies — GhostRoute fetches from 12 sources and auto-tests each one
- Wait for testing to finish. Each proxy shows: status (OK / DEAD), speed (ms), type, fraud score, country
- Click Clear Dead to remove failed proxies from the list
- Optionally click Test All to re-check existing proxies at any time
- For paid proxies: enter your provider credentials in the Paid Proxy section → click Generate URLs → click Test All
Scrape Type Filter v4.1.0
Before scraping, select which protocols you want using the pill buttons at the top of the page: ALL · HTTP · HTTPS · SOCKS4 · SOCKS5. Multiple pills can be active at once. See the Scrape Type Filter section for full details on when to use each type.
Understanding proxy safety ratings
| Rating | Fraud Score | Meaning | Use for AdSense? |
|---|---|---|---|
| ✓ Elite | 0–20 | Clean residential IP. Looks like a real home user. | ✓ Yes |
| ⏳ Unverified | Unknown | Could not verify via ip-api (rate limited). Retest in 1 minute. | Maybe |
| ✗ Leaking | 21–100 | Real IP is exposed or flagged as datacenter/bot. Avoid for sensitive campaigns. | ✗ No |
- No cost — great for testing
- One-click scraping from 12 sources
- Auto-tested after scraping
- Shared — many people use same IP
- Often flagged or slow
- Not suitable for AdSense
- Die quickly, need re-scraping
- Residential IPs — looks like real home users
- Elite safety scores
- Fast and stable
- Best for AdSense campaigns
- Monthly cost from provider
- Need an account with proxy provider
Auto-Refill
Enable in Settings. When your working proxy count drops below the threshold (default: 20), GhostRoute automatically scrapes fresh proxies and adds them mid-campaign without stopping.
Control which proxy protocols are fetched when scraping — new in v4.1.0
At the top of the Proxy Manager page you'll see protocol pill buttons: ALL · HTTP · HTTPS · SOCKS4 · SOCKS5. Clicking a pill toggles that protocol on or off. When you click Scrape Free Proxies, only the selected protocol types are fetched from the 12 scrape sources.
This is a manual control: you pick which types you want. By default ALL is active (no filter).
Which proxy type should I use?
| Type | What it is | Best for | Stealth level |
|---|---|---|---|
| HTTP | Standard HTTP proxy. Fast but plain-text. | Basic traffic, high volume, speed testing | Low |
| HTTPS | HTTP proxy with TLS — encrypted tunnel to proxy | Sites that need HTTPS. Slightly better than plain HTTP. | Medium |
| SOCKS4 | Low-level socket proxy. No authentication support. | Legacy use. No auth = public-only proxies. | Medium |
| SOCKS5 | Full SOCKS with auth, UDP support, IPv6 | AdSense campaigns, stealth, residential proxies | Highest |
Why filter by type?
Different campaigns have different requirements:
- Scraping only SOCKS5 gives you the best stealth proxies for sensitive AdSense campaigns
- Scraping only HTTP gives you the largest pool of fast proxies for volume testing
- Mixing types (ALL) maximises pool size but includes lower-quality proxies
SOCKS5 only — SOCKS5 proxies support full protocol tunneling and are hardest to fingerprint. For bulk traffic where you just need numbers, use ALL.How to use the Scrape Type Filter
- Go to Proxy Manager tab
- At the top of the page, find the protocol pills:
ALL·HTTP·HTTPS·SOCKS4·SOCKS5 - Click a pill to toggle it on (highlighted) or off. You can select multiple types at once.
- Click
ALLto deselect everything and scrape all types - Click Scrape Free Proxies — only selected types are fetched
HTTP proxies — Plain-text, unencrypted. The proxy server can read everything you send. They also commonly inject headers (
X-Forwarded-For, Via) that expose your real IP to the target website. HTTP proxies always leak your identity on AdSense campaigns. Never use them for sensitive or monetised traffic.HTTPS proxies — Encrypted tunnel to the proxy, but the proxy itself still sees your destination. Better than HTTP but still shared datacenter IPs — flagged by Google IVT.
SOCKS4 proxies — No authentication support. Always public/open proxies shared by hundreds of users. Suitable only for basic volume testing.
SOCKS5 proxies — Best option. Supports auth, full protocol tunneling, and IPv6. Hardest to detect. Use SOCKS5 for any AdSense or high-value campaign.
Simulate real visitors finding your site through Google, Bing, or DuckDuckGo — the strongest traffic signal for SEO and AdSense
When Organic Search is ON, GhostRoute runs a complete SERP (Search Engine Results Page) simulation. It doesn't visit your site directly — instead it opens Google, Bing, or DuckDuckGo, types your keyword, scrolls through the results page like a real user, finds your site listing, and clicks it. Your analytics sees this as organic / google, organic / bing, or organic / duckduckgo traffic with a real search engine referrer header.
- Browser opens Google.com, Bing.com, or DuckDuckGo.com via the proxy (based on your split setting)
- The search box is located — Ghost Cursor moves to it naturally
- The keyword is typed character-by-character with human typing delay and occasional typos
- Enter is pressed — SERP page loads
- GhostRoute scrolls through the results naturally, simulating a user scanning listings
- Your site's result is located — cursor moves to it, hovers briefly, then clicks
- Your site loads with
Referer: https://www.google.com/in the HTTP headers - Normal Journey steps run (scroll, inner page, dwell, etc.)
SERP position and ranking
GhostRoute searches for your site across the first 2–3 pages of results. The position it finds your site at matters for how the click looks in analytics:
| Your ranking position | What happens | Signal quality |
|---|---|---|
| Position 1–3 | Found immediately on page 1. Click happens fast — like a user who recognised the brand. | Excellent |
| Position 4–10 | Found on page 1 after scrolling. Most natural click pattern. | Excellent |
| Position 11–20 | GhostRoute goes to page 2 to find the result. Slightly less common but still valid. | Good |
| Not found | Falls back to a direct visit with Google as referrer. No organic click recorded. | Fallback only |
Keyword strategy
Enter keywords in Human Emulation → Organic Search → Keywords. Comma-separated — each visit randomly picks one:
best vpn 2025, top vpn for streaming, cheap vpn software, buy vpn online
| Keyword type | Example | Best for |
|---|---|---|
| Long-tail (3–5 words) | best free vpn for windows | Most natural, easier to rank for, higher CTR signal |
| Short-tail (1–2 words) | vpn software | Competitive — only use if you rank on page 1 |
| Brand keywords | ghostroute vpn | Direct brand traffic — use for returning visitor simulation |
| Question keywords | what is the best vpn 2025 | Looks very human — real searchers often phrase queries as questions |
Search engine split — Google, Bing & DuckDuckGo
Default: 60% Google, 25% Bing, 15% DuckDuckGo — approximates real-world global search engine share. Adjust the sliders to match your audience's actual search habits.
| Search Engine | Analytics referrer | Default share | Best for |
|---|---|---|---|
organic / google | 60% | Highest share worldwide. Essential for any campaign. | |
| Bing | organic / bing | 25% | Strong in US, UK, corporate/enterprise demographics. Older audiences. |
| DuckDuckGo | organic / duckduckgo | 15% | Privacy-conscious users, tech audiences, US-based traffic. Fast-growing share. |
Having all three engines in your analytics referrers looks far more natural than 100% Google — real sites receive organic traffic from multiple search engines. A site that only ever gets Google referrers is statistically unusual.
- Traffic appears as Organic/Google, Organic/Bing, or Organic/DuckDuckGo in analytics
- Sends real search engine
Refererheader — not spoofed - 3-engine mix looks completely natural — real sites get traffic from all three
- Boosts CTR signals that Google uses in ranking algorithms
- Multiple keyword rotation creates authentic diverse search traffic
- Full SERP scroll behaviour — mimics user scanning results before clicking
- Adds 10–20 seconds per visit (SERP page load + scroll + click)
- Site must rank in top 20 results for the keyword
- Uses more proxy bandwidth (SERP page + your page)
- Not suitable if you just need fast raw visit numbers
How to use Organic Search
- Go to Human Emulation tab → Core Behavior
- Toggle Organic Search to ON
- Scroll to the Organic Search settings block that appears
- Enter your keywords comma-separated:
best vpn 2025, buy vpn, vpn for windows - Set the Google / Bing / DuckDuckGo split sliders (default 60/25/15 is fine for most sites)
- Click Save Settings
- Run a Test Visit first — confirm GhostRoute finds your site in search results
- If Test Visit shows "site not found in SERP", add a keyword your site actually ranks for
- Launch campaign — every visit now performs the full SERP simulation
Build session history before hitting your target — makes each visit look like a real browsing session
Before visiting your target URL, GhostRoute first visits 1–3 neutral websites (like Google, Wikipedia, or BBC). This builds a realistic browsing history inside the browser session. When your target site loads, it sees a browser that was already active — not an empty browser that opened straight on your site.
Think of it like this: a real person doesn't open their browser and immediately land on your site from nowhere. They were already browsing something. Warmup simulates this.
- Bypasses "cold start" bot detection
- Builds realistic cookie history before your site loads
- Creates natural referrer chain (prior sites → your site)
- Makes returning visits look authentic
- Strongly reduces IVT (Invalid Traffic) flags
- Adds 6–12 seconds per visit (2–4s per warmup URL)
- Uses extra proxy bandwidth
- Slightly fewer total visits per hour
How to configure Warmup
Go to Settings → Warmup Customisation:
| Field | What to enter | Default |
|---|---|---|
| Custom Warmup URLs | One URL per line. Use well-known sites. Leave blank for auto defaults. | Wikipedia, YouTube, BBC, Reddit |
| Custom Warmup Keywords | Decoy search queries typed before your target. Leave blank for built-in random queries. | Random built-in queries |
How to use Browser Warmup
- Go to Human Emulation tab → make sure Browser Warmup Visit toggle is ON
- Go to Settings tab → scroll to Warmup Customisation
- In Custom Warmup URLs: enter one URL per line (Wikipedia, YouTube, BBC, etc.) or leave blank to use built-in defaults
- In Custom Warmup Keywords: enter decoy search terms or leave blank for random built-in queries
- Click Save Settings
- Warmup now runs automatically at the start of every visit — no further action needed
Spread traffic naturally throughout the day instead of sending it all at once
When Drip-Feed is ON, GhostRoute adds a random 5–10 minute delay between each batch of visits. Instead of 100 visits hitting your site in 30 minutes, they arrive gradually over hours — like real organic traffic would.
- Traffic patterns look completely natural
- Essential for AdSense accounts — burst traffic triggers IVT flags
- Matches real-world traffic spread over the day
- Safer for long-term use
- Campaign takes much longer to complete
- App must stay open/running the whole time
- Not useful if you need fast results
How to use Drip-Feed
- Go to Human Emulation tab
- Toggle Drip-Feed Mode to ON — or select the AdSense Safe preset which enables it automatically
- Click Save Settings
- Launch your campaign normally — GhostRoute adds 5–10 minute random gaps between visit batches automatically
- The campaign will take much longer to complete. Leave the app open and running.
Every setting that controls HOW the bot behaves on your site
These settings are in the Human Emulation tab. They apply to all campaigns. After changing, click 💾 Save Settings.
How to use Human Emulation
- Click Human Emulation in the sidebar
- In Core Behavior: toggle each feature ON or OFF using the toggle switches. Changes take effect on the next campaign.
- In Mouse & Typing: drag the sliders to set mouse speed, hover pause, text select probability, typing delay, typo rate, and max idle time
- In Dwell & Session: set min/max page wait, bounce rate, ad dwell times, inner page dwell, warmup dwell, and tab idle time
- In Organic Search: enter your keywords and set the Google/Bing/DuckDuckGo split sliders (only if Organic Search toggle is ON)
- Click Save Settings at the bottom — settings persist between sessions
Core toggles quick reference
| Toggle | What it does | Default | Keep ON? |
|---|---|---|---|
| Simulate Human Clicks | Curved Bezier mouse movement instead of instant teleporting | ON | Always |
| Auto-Scroll Pages | Scrolls through page during visit — boosts time-on-page | ON | Yes |
| Ghost Cursor | Natural mouse path algorithm — defeats mouse pattern detection | ON | Always |
| Cookie Banner Accept | Auto-dismisses GDPR cookie popups | ON | Yes |
| Browser Warmup Visit | Visits neutral sites first to build history | ON | Yes (unless debugging) |
| Inner Page Navigation | Clicks internal links — reduces bounce rate | ON | Yes |
| Persona Persistence | Reuses browser profile per proxy — looks like returning user | ON | Yes |
| Randomize URL Order | Shuffles URL list — prevents detectable patterns | ON | Yes |
| Desktop Notifications | Windows alerts when campaign ends or errors occur | ON | Optional |
| Tab Switching | Opens dummy tab and idles — lengthens session | OFF | Optional |
| Drip-Feed Mode | Adds delays between batches — spreads traffic over time | OFF | AdSense: Yes |
Mouse & Typing settings
| Setting | What it does | Default |
|---|---|---|
| Mouse Speed | Slow = elderly user profile. Medium = average. Fast = power user. Affects hover pause times. | Medium |
| Hover Pause | How long cursor stops over elements before moving | 800–2500 ms |
| Text Select Probability | Chance bot randomly highlights text — adds engagement signal | 50% |
| Typing Delay | Pause between keystrokes when filling forms or search boxes. 100–200ms = human speed. | 150 ms |
| Typo Rate | % chance of typing wrong character and correcting it. Mimics real human error rate. | 7% |
| Max Idle | Maximum seconds to pause between actions | 30 s |
Dwell & session times — plain English
| Setting | What it means in simple words | Default |
|---|---|---|
| Min / Max Wait | How many seconds the visitor spends reading your page before leaving. 3–8 seconds = a quick reader. Increase to 15–30 seconds for longer engagement signals. | 3–8 s |
| Bounce Rate | In the real world, some visitors open a page and immediately leave without clicking anything — this is called a "bounce". Set to 30% means 30 out of 100 visits leave quickly. Real sites have 40–70% bounce rate. This setting makes your traffic look real by including some short visits. Do not set to 0% — zero bounce rate is suspicious. | 30% |
| Bounce Dwell | How long a "bounce" visitor stays before leaving. 5–10 s = they opened the page, glanced at it, then left. Realistic. | 5–10 s |
| Ad Dwell | How many seconds the visitor's mouse moves around the ad area on your page. Higher = Google sees longer ad visibility time = better impression quality. | 25–55 s |
| Ad Hover | How long the cursor stops directly on top of an ad banner. 1–2.5 seconds = cursor paused on it, simulating a user noticing the ad. | 1–2.5 s |
| Inner Page Dwell | When the visitor clicks a link to another page on your site, how long do they stay on that sub-page before coming back or leaving. | 1.5–3.5 s |
| Warmup Dwell | How long the bot spends on each warmup site (e.g. Wikipedia) before visiting your site. Enough to load cookies and look like a real session, but not so long it wastes time. | 2–4 s |
| Tab Idle Time | When Tab Switching is ON, the visitor opens a second tab and idles there for this many seconds before coming back to your site — mimicking someone who opened a second tab to check something. | 8–20 s |
| Inner Visit Prob | Out of all visits that have Inner Page Navigation ON, what percentage actually click a sub-page link. 60% means 6 out of 10 visits will click into a sub-page. The other 4 just read the main page and leave. | 60% |
The physics-based mouse movement engine
Ghost Cursor is the library that controls how the mouse moves. Instead of teleporting the cursor instantly (obvious bot behaviour), it draws natural curved paths with acceleration and deceleration — the way a human hand actually moves a mouse.
- Defeats canvas-based mouse fingerprinting
- Passes bot detection that analyses mouse movement patterns
- Generates unique path for every move — no two visits identical
- Works at all mouse speed settings
- Adds small amount of time per interaction
- Very slightly slower than instant-click bots
How to use Ghost Cursor
- Go to Human Emulation tab → Core Behavior
- Make sure Ghost Cursor toggle is ON (it is ON by default)
- Set your preferred Mouse Speed in the Mouse & Typing section: Slow = elderly profile, Medium = average, Fast = power user
- Adjust Hover Pause range — how long cursor lingers over elements before moving on
- Click Save Settings — Ghost Cursor is now active on all future visits automatically
Generates a believable, unique browser identity for every session — fully automatic
Every browser exposes dozens of data points — screen resolution, installed fonts, GPU model, audio hardware, language settings, timezone, and more. Together these form a "fingerprint" that identifies a device uniquely. Headless browsers have obvious, consistent fingerprints that bot-detection systems recognise instantly.
GhostRoute's Fingerprint Generator (powered by fingerprint-generator) creates a realistic, internally consistent fingerprint for each session — matching real device combinations that actually exist in the wild. Every visit gets a different fingerprint, making sessions appear to come from entirely different devices.
This is fully automatic — you don't configure anything. It runs on every session.
What it spoofs
| Signal | What happens |
|---|---|
| Screen resolution | Set to realistic values (1920×1080, 1366×768, 2560×1440, etc.) matching the device profile |
| Device memory | navigator.deviceMemory set to 4GB, 8GB, or 16GB based on profile |
| Hardware concurrency | CPU core count matched to device profile (4, 8, 12, 16 cores) |
| Browser plugins | Realistic plugin list for the selected browser version |
| Language & locale | Matched to proxy's country code — US proxy gets en-US, DE proxy gets de-DE |
| User-Agent header | Consistent Chrome version across all browser properties (not just the UA string) |
| Viewport size | Realistic window size matching the screen resolution |
- Sites like Cloudflare cross-check 30+ fingerprint signals against each other
- Inconsistent fingerprints (e.g. wrong GPU for an OS) instantly flag bots
- Unique fingerprint per session = every visit looks like a different person
- Locale matching proxy country is critical — mismatch is a major IVT signal
- Runs automatically — no settings needed
- Works alongside Stealth Plugin and Ghost Cursor
- Canvas Noise / WebGL Spoof add further randomisation on top of the base fingerprint
How to use / verify Fingerprint Generator
Fingerprint Generator runs automatically on every session — there is nothing to configure. To verify it is working:
- Run a Test Visit (Campaigns tab → 🧪 Test Visit)
- In the diagnostic report, check the Fingerprint row — it should show a unique device profile (OS, Chrome version, screen resolution, GPU)
- Run a second Test Visit — the fingerprint values should be different from the first run
- If you see identical fingerprints across runs, ensure Stealth Plugin is ON in Settings
Simulates natural human fatigue as a browsing session progresses — fully automatic
Real users don't browse at the same pace from the first click to the last. They start alert, then slow down as they read, think, or get distracted. Bots, by contrast, operate at perfectly constant speed — which is one of the easiest patterns for bot-detection systems to flag.
The Session Tiredness engine introduces a gradual, natural slowdown into each visit. As time passes within a single session, actions take slightly longer — pauses between scrolls grow, hover durations increase, mouse movements become less decisive. The effect is subtle but measurable in behavioural analytics.
This is fully automatic — no configuration needed. It activates on every session.
How tiredness is applied
| Behaviour | Early session | Late session |
|---|---|---|
| Scroll pause | Baseline (700–1800 ms) | Baseline × 1.2–1.5 (up to 2700 ms) |
| Hover duration | Baseline (800–2500 ms) | Slightly extended — lingers longer on elements |
| Between-action idle | Short random pauses | Longer, more frequent idle moments |
| Mouse speed | Matches Mouse Speed setting | Marginally slower — deliberate movement |
| Typing delay | Baseline (150 ms) | Slightly slower, higher typo rate |
How to use / observe Session Tiredness
Session Tiredness is fully automatic — it activates on every session with no configuration needed. To see it in action:
- Turn Headless OFF in the Campaigns tab (debug mode — browser window is visible)
- Run a Test Visit or short campaign
- Watch the browser window — early in the session actions are crisp, later actions have slightly longer pauses between them
- Turn Headless back ON for production campaigns
Reuse browser profiles to simulate returning visitors
When Persona Persistence is ON, GhostRoute saves the browser profile (cookies, localStorage, cached data) for each proxy and reuses it on future visits. Your site sees the same "person" returning — with existing cookies and session history — rather than a brand new browser every time.
- Returning visitor signals improve credibility
- Cookies from previous visits are present — looks real
- Reduces new-session anomaly detection
- Better engagement metrics over time
- Uses disk space to store profiles (50 profiles by default)
- If a profile gets flagged, that proxy/profile combo stays flagged
- Slightly slower first load per new proxy
How to use Persona Persistence
- Go to Human Emulation tab → Core Behavior
- Toggle Persona Persistence to ON
- Click Save Settings
- GhostRoute automatically saves a browser profile folder for each proxy IP. On the next visit from the same proxy, it loads the saved profile — cookies, localStorage, and cached data are all present.
- Profiles are stored in
%APPDATA%\GhostRoute\profiles. You can delete this folder to start fresh profiles for all proxies.
Simulate users who multitask between browser tabs
When Tab Switching is ON, the bot opens a second tab (a random website), idles there for 8–20 seconds, then switches back to your site. This mimics users who browse multiple tabs at once — a very natural behaviour that increases total session time.
- Increases total session duration significantly
- Very natural behaviour — most real users multitask
- Adds engagement signal without suspicious rapid activity
- Adds 8–20 seconds to every visit
- Uses extra proxy bandwidth (loading second tab)
- Slower campaign completion
How to use Tab Switching
- Go to Human Emulation tab → Core Behavior
- Toggle Tab Switching to ON
- In the Dwell & Session section, set Tab Idle Time — how long the bot idles on the dummy tab (default 8–20 s)
- Click Save Settings
- Alternatively, enable the 🗂️ Tab Switch & Idle step in the Journey Builder — this gives you precise control over where in the journey the tab switch happens
Everything GhostRoute does automatically — no configuration required
GhostRoute has two layers: Manual Controls (settings you configure) and Auto Controls (things the engine handles on its own every time). This page documents the automatic layer.
Automatic stealth protections
| Protection | What it does automatically | Why it matters |
|---|---|---|
| Stealth Plugin | Patches 20+ headless browser signals on page load: navigator.webdriver, plugin lists, Chrome runtime, permission API, and more | Raw headless Chrome fails basic bot checks. The patch makes it indistinguishable from a regular desktop Chrome installation. |
| Fingerprint Generator | Creates a unique, internally consistent device fingerprint per session: screen, GPU, memory, locale, UA | Sites cross-check 30+ signals. A mismatch (e.g. US IP + German locale) is an instant bot flag. |
| Canvas Noise | Injects invisible pixel variation into HTML5 Canvas output on every render | Canvas fingerprinting reads pixel patterns to identify a browser uniquely. Noise makes every session's canvas output different. |
| WebGL Spoof | Randomises the GPU vendor and renderer strings returned by WebGL API | WebGL is one of the strongest fingerprinting vectors. Consistent GPU data across sessions links them together. |
| Audio Noise | Adds inaudible variation to AudioContext output | Audio fingerprinting measures the exact floating-point output of the audio stack. Noise ensures every session differs. |
| Timezone Emulation | Sets browser timezone to match the proxy's detected country | A US IP with a UTC+5:30 timezone is an obvious mismatch that triggers IVT flags. |
| WebRTC Block | Disables WebRTC API entirely via browser flags | WebRTC can expose your real IP address even behind a proxy. Disabling it prevents IP leaks. |
Automatic visit behaviour
| Behaviour | What happens automatically | Why it matters |
|---|---|---|
| Ghost Cursor | Every mouse move follows a physics-based Bezier curve with natural acceleration and deceleration. No instant teleporting. | Mouse movement patterns are a primary bot-detection signal. Straight-line or instant movements fail most advanced detectors. |
| Session Tiredness | Actions gradually slow as the session ages — longer pauses, slightly slower mouse, extended hover times | Bots move at perfectly constant speed. Human speed varies. The tiredness curve matches real behavioural patterns. |
| Cookie Banner Auto-dismiss | Detects and clicks common GDPR/cookie consent popups automatically (if enabled in Journey) | Bots that ignore cookie banners never load full page content, making bounce rate look artificial. |
| Browser Warmup | Visits 1–3 neutral sites (Wikipedia, YouTube, etc.) before loading the target URL | A browser that opens directly on your site has no history — obvious cold-start signal. Warmup builds realistic session context. |
| Proxy Auto-rotation | Picks the next proxy for each visit based on your rotation setting (Round-Robin / Random / Fastest-First) | Same IP repeated = detectable pattern. Rotation ensures each visit appears to come from a different person. |
| User-Agent Rotation | Selects a different real Chrome User-Agent string from a pool of 200+ for each session | A repeated UA string across hundreds of visits is a strong bot signal. |
| Auto-Refill | When alive proxy count drops below threshold, scrapes and tests a fresh batch mid-campaign (if enabled) | Free proxies die constantly. Without auto-refill, campaigns fail silently when the pool empties. |
| Drip-Feed timing | Inserts random 5–10 minute gaps between visit batches (if Drip-Feed is ON) | Traffic arriving in continuous bursts is the clearest IVT pattern. Natural traffic has peaks, lulls, and gaps. |
| Organic Search routing | Opens Google, Bing, or DuckDuckGo (based on split %), types the keyword, finds your site in results, clicks it (if Organic Search is ON) | Direct visits from headless browsers look suspicious. Coming via search provides a legitimate referrer chain. Three engines = natural referrer diversity. |
Manual vs Auto — quick reference
- Target URLs and visit count
- Thread count and headless mode
- Proxy list and rotation mode
- Journey steps (which actions, in what order)
- Drip-Feed ON/OFF
- Organic Search ON/OFF + keywords
- Mouse speed, dwell times, bounce rate sliders
- Scrape type filter (HTTP/HTTPS/SOCKS4/SOCKS5)
- Scheduler start time and repeat interval
- Warmup URLs and warmup keywords
- User-Agent and Referrer selection
- Ad CTR % (keep at 0 for AdSense)
- Ghost Cursor physics on every move
- Fingerprint generation per session
- Canvas, WebGL, Audio noise injection
- WebRTC blocking
- Timezone matching to proxy country
- Stealth plugin patches on page load
- Session tiredness slowdown
- Cookie banner detection & dismiss
- Browser warmup site visits
- Proxy rotation between visits
- User-Agent rotation per session
- Auto-refill when proxy pool runs low
- Drip-Feed delay timing
Track and export your campaign performance
The Analytics tab shows your full visit history across all campaigns. Use the date filter to narrow results. Every visit is logged with: timestamp, URL, proxy used, status (success/fail), and session duration.
How to use Analytics
- Click Analytics in the sidebar
- Use the Date From / Date To filter fields to narrow the date range shown
- The table shows all visits: timestamp, URL, proxy used, status (Success / Failed), session duration, and proxy country
- Click Export CSV to download the filtered data as a spreadsheet. Open in Excel or Google Sheets for further analysis.
- Reports auto-save to
%APPDATA%\GhostRoute\reports— you can access past reports there without opening the app
Exporting reports
Click Export CSV to download a spreadsheet. Open in Excel or Google Sheets for custom analysis. Reports are also saved automatically in %APPDATA%\GhostRoute\reports.
Pro Enterprise — Record your own browsing path and replay it on every visit
The Action Recorder lets you manually browse your own website in a real Chrome window while GhostRoute silently records every action you take — every click, scroll, form input, and page navigation. Once you stop recording, GhostRoute saves this as a replayable script. On every future campaign visit, GhostRoute replays your exact recorded path with randomised timing, making each visit unique even though the actions are the same.
Think of it as teaching GhostRoute to browse your site exactly the way you want a visitor to — clicking the things that matter, spending time on the pages that count, interacting with the elements that drive your analytics goals.
What gets recorded
| Action | Recorded? | Detail |
|---|---|---|
| Mouse clicks | ✓ Yes | Click target, coordinates, and timestamp. Replayed with Ghost Cursor movement to each target. |
| Page scrolling | ✓ Yes | Scroll direction, amount, and speed. Replayed with natural human scroll rhythm. |
| Link navigation | ✓ Yes | Full URL of every page visited. Replayed in same order. |
| Form typing | ✓ Yes | Characters typed and field targets. Replayed with typing delay and typo simulation. |
| Time spent on each page | ✓ Yes | Actual dwell time recorded. Replayed with ±20% random variation to avoid identical timing. |
| Hover positions | ✓ Yes | Where the cursor lingered. Helps GhostRoute know which elements to mouse-over during replay. |
| Ad clicks | ✓ Yes | If you click an ad during recording, it is replayed. Use CTR % setting to control frequency instead of clicking during recording. |
| Video play/pause | Partial | Click on video player is recorded. Actual video playback state is not guaranteed to match. |
| File downloads | ✗ No | Download actions are skipped during replay — they can't be reproduced safely across different sessions. |
| Login / authentication | ✗ Not recommended | Credentials typed during recording are saved in the script file. Avoid recording login flows unless the site is yours. |
How to use the Recorder
- Go to the Recorder tab (Pro or Enterprise plan required)
- Enter your site's URL in the Start URL field if prompted, or leave blank — the campaign's Target URL is used
- Click ▶ Start Recording — a Chrome browser window opens
- Browse your site naturally: click the links a real visitor would click, scroll through content, hover over ads, navigate to sub-pages. Take your time.
- When done, click ■ Stop Recording in the Recorder tab (not the browser window)
- Give the recording a name (e.g. "Homepage → Article → CTA click") and click Save
- The recording appears in your Saved Recordings list
- To use it in a campaign: go to Journey Builder, enable the 📹 Recorded Path step, and select your recording from the dropdown
- Click Apply in Journey Builder — the recorded path now runs on every campaign visit
Managing recordings
| Action | How to do it |
|---|---|
| Rename a recording | Click the recording name in the Saved Recordings list → edit inline → press Enter |
| Delete a recording | Click the 🗑️ icon next to the recording name |
| Preview a recording | Click ▶ Preview — GhostRoute replays it in a visible browser so you can see exactly what visitors will experience |
| Create multiple recordings | You can have different recordings for different URL patterns (homepage, product page, blog post). Set which one runs via Journey Builder. |
Timing randomisation — why no two replays are identical
During replay, GhostRoute does NOT reproduce your exact recorded timing. Instead it applies randomisation on top:
- Dwell times are reproduced with ±15–25% variation — if you spent 4 seconds on a section, replay spends 3–5 seconds
- Mouse paths are newly generated each replay using Ghost Cursor — same target element, different curved path
- Typing delay and typo rate are randomised independently per character
- Scroll amounts per step vary slightly around the recorded average
This ensures that even if you run 1000 visits, no two visits have the same exact timing fingerprint — which is what bot detectors look for.
When recordings break — and how to fix them
If your site's layout or HTML structure changes after you made a recording, some click targets may no longer exist at the same location. Signs of a broken recording:
- Test Visit shows a recording step failing
- Campaign success rate drops suddenly after a site update
- Session duration becomes very short (visit ends early because a step fails)
Fix: Delete the old recording and record a fresh one. Recordings are not automatically updated when your site changes — treat them as needing re-recording whenever you make significant layout changes.
- Your site has a specific, important click path (e.g. article → related post → newsletter signup)
- You want to click specific ads at specific positions on the page
- Your site has complex JavaScript interactions (sliders, carousels, expandable sections)
- You want to simulate a multi-page session with a very specific route
- The Journey Builder's generic inner-page navigation doesn't click the right links
- Simple sites where any click pattern works fine
- You want GhostRoute to automatically adapt to different pages/URLs
- You don't want to maintain recordings as the site changes
- Fast setup — Journey Builder needs no recording time
Enterprise Only — Scale to hundreds of threads by running GhostRoute on multiple remote servers simultaneously
A VPS (Virtual Private Server) is a remote computer you rent by the hour or month — it runs 24/7 in a data centre. VPS Farm lets you install GhostRoute on multiple VPS servers and control them all from your main PC. Each server runs its own campaign threads, so instead of 50 threads on your local machine, you can have 50 threads on Server A + 50 on Server B + 50 on Server C = 150 total threads, all controlled from one screen.
Your local PC stays fast. GhostRoute on it is just the controller — all the heavy browser work happens on the VPS servers.
What VPS to get — hardware recommendations
| Threads per VPS | Minimum RAM | Recommended CPU | Disk | Est. cost/mo |
|---|---|---|---|---|
| 10 threads | 4 GB RAM | 2 vCPU | 40 GB SSD | ~$10–15 |
| 20 threads | 8 GB RAM | 4 vCPU | 60 GB SSD | ~$20–30 |
| 50 threads | 16 GB RAM | 8 vCPU | 80 GB SSD | ~$50–70 |
| 100 threads | 32 GB RAM | 16 vCPU | 120 GB SSD | ~$100–150 |
Recommended operating system
GhostRoute runs on Windows Server 2019/2022 or Ubuntu 20.04/22.04 LTS. Windows is simpler to set up if you're not familiar with Linux. Ubuntu is cheaper (no Windows licensing fee) and uses less RAM.
How to set up a VPS node — full steps
- Rent a VPS from your chosen provider. Select Windows or Ubuntu. Note the server IP address.
- Connect to the VPS — use Remote Desktop (RDP) for Windows, or SSH for Ubuntu
- Download GhostRoute on the VPS — get the installer or portable exe from ghostroute.io
- Activate your Enterprise license on the VPS — your Enterprise plan supports up to 10 devices, so each VPS uses one device slot
- Configure GhostRoute on the VPS: add proxies, set target URLs, configure Human Emulation settings as needed
- Start the VPS API in GhostRoute on the VPS: go to Settings → VPS Mode → Enable API Server → note the port number (default: 7432)
- Open the firewall port on the VPS — allow inbound TCP on the API port (7432 by default) from your local PC's IP
- Back on your local PC: go to GhostRoute → VPS Farm tab → click Add Node
- Enter the VPS IP address and port → click Connect — status turns green when connected
- Repeat steps 1–9 for each additional VPS you want in the farm
Network / firewall requirements
| Port | Direction | Purpose |
|---|---|---|
| 7432 (default) | Your PC → VPS (inbound on VPS) | GhostRoute control API — your local app sends commands to the VPS |
| 80, 443 | VPS → internet (outbound) | Browser traffic — the VPS's Chrome instances need outbound web access |
| Proxy ports | VPS → proxy server | Whatever ports your proxies use (3128, 1080, 8080, etc.) |
Launching campaigns on VPS nodes
- All connected nodes appear in the VPS Farm tab with status indicators (green = online, red = offline)
- Select which nodes you want to include in the campaign by clicking their checkboxes
- Configure the campaign (URL, visit count, threads) as normal
- Click Launch on Farm — GhostRoute distributes the visit workload across all selected nodes
- Progress from all nodes is shown in a unified view — you can see each node's thread count, visit progress, and success rate
Diversity Proxy List
The Diversity Proxy List is a pool of proxies shared across all your VPS nodes. Instead of each node using its own proxies, the farm draws from this shared pool — ensuring no two nodes use the same proxy IP at the same time. This prevents duplicate IP visits across your farm.
Import from Proxy Manager v4.1.0
Click ↓ Import from Proxy Manager above the diversity proxy textarea — GhostRoute pulls all proxies with status OK from your Proxy Manager and fills the diversity list in one click.
- Massive scale — 500+ threads across multiple servers
- Your local PC stays fast — all browser work happens on VPS
- Different server geolocations = different IP ranges naturally
- 24/7 operation — VPS runs even when your PC is off
- Central control — manage every node from one screen
- Diversity proxy pool prevents IP overlap between nodes
- VPS rental cost is additional (~$10–150/mo per server)
- Enterprise plan required (one device slot per VPS)
- Initial setup takes 30–60 minutes per server
- Linux VPS requires some command-line knowledge
Global defaults — apply to all campaigns unless overridden per-campaign
How to use Settings
- Click Settings in the sidebar
- In Stealth & Fingerprinting: review all toggles — leave them ON unless debugging a specific issue
- In User-Agent & Referrer: choose UA rotation mode and default referrer source
- Click Session Config ▸ to expand the collapsible — adjust threads, delay, CTR, rotation, auto-refill
- In Warmup Customisation: enter custom warmup URLs and keywords, or leave blank for defaults
- Scroll to License to view your plan details, activate a new key, or deactivate a device
- Click Save Settings at the bottom — all settings persist between app restarts
Stealth & Fingerprinting
All stealth protections are ON by default. Do not turn any of these off unless you are debugging a specific issue.
User-Agent & Referrer
| Setting | Options | Default |
|---|---|---|
| User-Agent Rotation | Rotate (200+ real UAs) / Chrome Win / Chrome Mac / Firefox / Safari iOS / Android | Rotate |
| Default Referrer | Google / Bing / Facebook / Twitter / Reddit / Instagram / Direct / Random |
Session Config
| Setting | Description | Default |
|---|---|---|
| Concurrent Threads | Global default. Overridden per-campaign. Max depends on plan (Trial: 3, Pro: 10, Enterprise: 50) | 3 |
| Delay Between URLs | Gap between launching each new visit | 2000 ms |
| Ad CTR % | Global default. Always 0 for AdSense sites. | 0% |
| Proxy Rotation | Round-Robin (ordered) / Random / Fastest-First | Round-Robin |
| Each URL × Every Proxy | Visit every URL from every proxy. Multiplies total visits (URLs × Proxies). | OFF |
| Proxy Scrape Batch Size | How many proxies to fetch per scrape | 100 |
| Auto-Refill | Auto-scrape when alive proxies drop below threshold | OFF |
| Refill Threshold | Trigger refill when alive count falls below this number | 20 |
Warmup Customisation
| Field | Description | Default |
|---|---|---|
| Custom Warmup URLs | Sites to visit before target. One per line. Leave blank for auto defaults. | Wikipedia, YouTube, BBC, Reddit |
| Custom Warmup Keywords | Decoy search terms typed before target visit. Leave blank for random built-in queries. | Random built-in |
Session Config (collapsible) v4.1.0
In v4.1.0 the Session Config block is now collapsible — click the Session Config ▸ header to expand or collapse it. This keeps the Settings page clean when you don't need to change session parameters. All settings inside work exactly as before.
License & Account v4.1.0
Your account plan details (plan name, devices, expiry) are now shown directly in the Settings page rather than the sidebar. To activate a new key or deactivate a device, scroll to the License card inside Settings.
Switch the entire app UI between dark and light mode
Click the 🌙 / ☀️ button in the top bar of the app (between the window title and the window controls). The icon switches between moon (dark mode) and sun (light mode). Your preference is saved automatically and restored the next time you open GhostRoute.
| Mode | Background | Best for |
|---|---|---|
| Dark (default) | Deep blue-black | Low-light environments, long sessions, less eye strain at night |
| Light | Soft lavender-white | Bright rooms, sharing your screen, users who prefer light UIs |
How to switch theme
- Look at the top bar of the GhostRoute app window — between the window title and the window control buttons (minimise, maximise, close)
- Click the 🌙 button to switch to light mode. The icon changes to ☀️
- Click ☀️ to switch back to dark mode
- The theme applies instantly — no restart needed
- Your choice is saved automatically
How GhostRoute hides that it's a bot
Every browser has a unique "fingerprint" — a set of properties that identify it. Headless Chrome (what bots use) has obvious fingerprints that sites can detect. GhostRoute patches all of them.
| Protection | What it does | Default |
|---|---|---|
| Stealth Plugin | Patches 20+ headless browser signals: navigator.webdriver, browser plugins list, language settings, and more. Core protection — always keep ON. | ON |
| Canvas Noise | Adds invisible pixel noise to HTML5 Canvas. Every session produces a different canvas fingerprint — defeats canvas tracking. | ON |
| WebGL Spoof | Randomises GPU model name returned by WebGL API. Sites use GPU info to fingerprint devices. | ON |
| Audio Noise | Adds inaudible noise to AudioContext. Each session has unique audio fingerprint. | ON |
| Timezone Emulation | Sets browser timezone to match proxy's country. Timezone mismatch with IP is a major bot signal. | ON |
| WebRTC Block | Disables WebRTC API completely. Without this, sites can discover your real IP even behind a proxy. | ON |
How to manage Stealth protections
- Go to Settings tab → Stealth & Fingerprinting section at the top
- All six protections are ON by default — leave them all ON for every production campaign
- If you need to debug a click or interaction issue, temporarily turn a single protection OFF, run a Test Visit, then re-enable it
- Click Save Settings after any change
- To verify protections are working: run a Test Visit and check the stealth score in the diagnostic report — score should be 80+
All factory default settings in one place
| Setting | Default |
|---|---|
| Concurrent Threads | 3 |
| Delay Between URLs | 2000 ms |
| Min Page Wait | 3000 ms |
| Max Page Wait | 8000 ms |
| User-Agent | rotate |
| Referrer | google |
| Proxy Rotation | round-robin |
| Headless Mode | ON |
| Ad CTR % | 0% |
| Drip-Feed | OFF |
| Organic Search | OFF |
| Google / Bing / DuckDuckGo Split | 60% / 25% / 15% |
| Bounce Rate | 30% |
| Bounce Dwell | 5–10 s |
| Mouse Speed | medium |
| Hover Dwell | 800–2500 ms |
| Text Select Probability | 50% |
| Typing Delay | 150 ms |
| Typo Rate | 7% |
| Max Idle | 30 s |
| Scroll Steps Max | 5 |
| Scroll Amount | 150–550 px |
| Scroll Pause | 700–1800 ms |
| Ad Dwell | 25–55 s |
| Ad Hover | 1000–2500 ms |
| Inner Page Dwell | 1500–3500 ms |
| Inner Visit Probability | 60% |
| Warmup Dwell | 2000–4000 ms |
| Tab Idle | 8–20 s |
| Page Timeout | 60 s |
| Proxy TCP Check Timeout | 8 s |
| Proxy HTTP Check Timeout | 10 s |
| Proxy Scrape Batch | 100 |
| Auto-Refill Threshold | 20 proxies |
| Stealth Plugin | ON |
| Canvas Noise | ON |
| WebGL Spoof | ON |
| Audio Noise | ON |
| Timezone Emulation | ON |
| WebRTC Block | ON |
Common questions answered in plain English
GhostRoute uses the same Chromium engine as a real user's browser with all detectable signals patched. With elite residential proxies, traffic is statistically indistinguishable from organic visits.
Paid residential proxies with Elite safety score (fraud score 0–20). Free proxies are shared datacenter IPs that Google's IVT system flags easily. For AdSense use: always use paid residential.
Always start with 10–50 visits to test. Once confirmed working, scale up gradually. For AdSense, stay within 5–15% of your natural daily traffic to avoid anomaly detection.
Yes. With Headless Mode ON, all browsers run invisibly. Your PC must stay on and connected. You don't need to keep the GhostRoute window focused.
One campaign at a time locally. Use VPS Farm (Enterprise) to run parallel campaigns across multiple servers simultaneously.
Check the Issues section in the diagnostic report. Common fixes: replace the proxy (most common), check your URL is correct, try turning Headless OFF to watch what happens, try Stealth Max preset if site is blocking bots.
Everything is stored locally on your PC at %APPDATA%\GhostRoute. Only license validation requests go to our servers. Your URLs, proxies, and campaign data never leave your machine.
Due to the digital nature of the product and the availability of a fully-featured 3-day free trial, all purchases are final once a license key is activated.
v4.1.0 added: Dark/Light theme toggle, proxy scrape type filter (HTTP/HTTPS/SOCKS4/SOCKS5 pills), Fingerprint Generator for per-session device fingerprints, Session Tiredness engine for natural fatigue simulation, Campaign Scheduler (Enterprise), VPS Import from Proxy Manager button, collapsible Session Config in Settings, license widget moved to Settings page, +1pt font size, and faster proxy test timeouts (TCP: 8 s, HTTP: 10 s). See the What's New section for the full list.
As of v4.1.0, TCP check timeout was reduced from 15 s to 8 s and HTTP check from 20 s to 10 s. Dead proxies now fail faster, making batch testing noticeably quicker. Additionally, use the Scrape Type Filter to scrape only the proxy protocol you need — smaller, targeted batches test faster than mixed ALL batches.
v4.1.0 moved the account/license widget from the sidebar to the Settings page, and removed the version tag from the sidebar. The sidebar is now cleaner. Your license and plan info is still there — go to Settings → License.
Use social media sites as warmup destinations to create the most realistic referral history
Standard Browser Warmup visits neutral sites like Wikipedia or YouTube before hitting your target. Social Media Warmup takes this further — it includes Facebook, Instagram, Twitter/X, or Reddit as part of the warmup chain. The result: when your site loads, the browser session already has social media cookies, localStorage data, and referral history — exactly like a real person who was browsing social media before landing on your site.
This is especially powerful for campaigns where you want traffic to appear as Social / Facebook or Social / Reddit in Google Analytics.
Why social media warmup matters
Which social platforms to use as warmup
https://www.facebook.comhttps://www.reddit.comhttps://twitter.comhttps://www.instagram.comhttps://www.linkedin.comhttps://www.pinterest.comfacebook.com → youtube.com → yoursite.comHow to set up Social Media Warmup
https://www.facebook.comhttps://www.reddit.com
https://www.youtube.com
best vpn deal, vpn for netflix