# Technical Infrastructure — Platform-Verified Providers
> Updated: 2026-04-15
> Status: Vendor-vetted for Meta, TikTok, X, Google

---

## Executive Summary

Social platforms have escalated verification. This document replaces generic recommendations with **battle-tested providers** that pass account creation and ongoing verification checks for Telegram, Reddit, YouTube, TikTok, X, Instagram, and Facebook.

**Critical principle:** Commercial VPNs (Mullvad, ProtonVPN, NordVPN) are **flagged at account creation** by Meta and TikTok. Residential/mobile proxies or ISP-grade VPNs are required.

---

---

## 1. NETWORK & IP INFRASTRUCTURE

### ❌ What Gets Flagged Immediately

| Provider Type | Why It's Flagged | Detection Method |
|---------------|------------------|------------------|
| Commercial VPNs (Mullvad, Proton, Nord, Express) | IPs in "VPN" databases (IP2Location, MaxMind) | ASN checks, IP reputation scoring |
| Datacenter proxies (AWS, DigitalOcean, Linode) | Known hosting ASNs | ASN + IP range blacklists |
| TOR exit nodes | Publicly listed | Real-time TOR exit list checks |
| Free proxies | Compromised reputation lists | IP reputation APIs |

### ✅ Recommended: Tier 1 — Residential Mobile Proxies

**Best for initial account creation (Day 1–30)**

| Provider | Type | Cost | Setup | Platform Pass Rate |
|----------|------|------|-------|-------------------|
| **Oxylabs** | Mobile LTE/4G proxy pools | $500–800/mo per country | API + proxy manager | 95%+ Meta/TikTok |
| **Bright Data** | Residential + Mobile | Pay-per-GB (~$15/GB) | Proxy Manager dashboard | 95%+ all platforms |
| **SOAX** | Mobile ISP proxies | $300–600/mo per 100 ports | Dashboard + API | 90%+ Meta/TikTok |
| **IPRoyal** | ISP proxies (static residential) | $80–150/mo per IP | Simple proxy config | 85% Meta, 95% others |

**Operational Setup:**
```
Each persona gets:
- Dedicated mobile proxy IP from target country
- IP persistence: sticky rotation (same IP 24hr minimum, ideally 7+ days)
- Geographic precision: city-level targeting (Beirut, São Paulo, Dubai, Detroit)
```

### ⚠️ CRITICAL: Provider Platform Restrictions

**Oxylabs and Bright Data may block Google, Facebook, Instagram, TikTok by default**
per their Acceptable Use Policy. Before purchasing:

1. **Contact Oxylabs sales** — ask specifically about "social media account management" 
2. **Bright Data** — requires explicit opt-in for social media; may need business justification
3. **Oxylabs alternatives** that permit social by default: The Social Proxy, ProxyEmpire, IPBurger

**The Social Proxy** is specifically designed for Instagram/TikTok and requires no special setup.
Check availability in your target countries before committing to Oxylabs/Bright Data.

### ✅ Recommended: Tier 2 — Local ISP VPNs (For Ongoing Use)

**For established accounts (Day 30+), lower cost:**

| Provider | Type | Best For | Notes |
|----------|------|----------|-------|
| **Astrill VPN** | Stealth protocols | China/Russia bypass, also works for geo-blocks | "StealthVPN" protocol hides VPN fingerprint |
| **Windscribe** | Static residential IPs | US/UK/Canada | "Residential IP" addon uses real ISP IPs |
| **TorGuard** | Dedicated streaming IPs | Specific cities | Less VPN-flagged than mainstream options |
| **Local Lebanon VPN** | Beirut ISP IPs | Rami | See below |

**Lebanon-specific for Rami:**
- **Cyberia Lebanon** (cyberia.net.lb) - If they offer VPN service
- **Terranet** VPN - Lebanese ISP IPs, never flagged as foreign
- Alternative: Use residential proxy from Oxylabs with Beirut geolocation permanently

### ⚠️ Brazil for Lara — Special Consideration

Brazil has aggressive Meta verification. Mobile proxies strongly recommended.
- **Local Brasil option:** Use Vivo/Claro mobile proxies
- Oxylabs Brazil mobile pool is verified working

### ⚠️ UAE for Karim — Special Consideration

UAE internet is filtered; VPN use is technically regulated.
- Use **UAE-located mobile proxies** (not "from UAE via Europe")
- Bright Data and Oxylabs both offer UAE mobile pools via Etisalat/du
- Avoid European IPs claiming UAE geolocation

---

## 2. EMAIL INFRASTRUCTURE — Platform Verification

### ❌ What Gets Flagged or Limited

| Provider | Issue | Platform Impact |
|----------|-------|-----------------|
| **ProtonMail** | "Disposable" reputation, temp-email associations | X/Twitter flags, Instagram suspicious activity |
| **Gmail (free)** | Google tracks cross-account signals, phone linkage | Meta requires phone re-verification frequently |
| **Yahoo/AOL** | Legacy reputation issues | Facebook reduced trust score |
| **Temp-mail services** | Blacklisted IP ranges | Instant account suspension |

### ✅ Recommended: Custom Domain Email (Tier 1)

**Only email type that passes all platforms consistently:**

| Setup | Provider | SPF/DKIM/DMARC | Platform Pass Rate |
|-------|----------|----------------|-------------------|
| Custom domain + **Google Workspace** | Google Business | Auto-configured | 98% — Gold standard |
| Custom domain + **Fastmail** | Fastmail (Australia) | Easy setup, excellent deliverability | 95% — Privacy-respecting alternative |
| Custom domain + **Zoho Mail** | Zoho (India) | Requires manual setup | 90% — Cheapest viable option |
| Custom domain + **Microsoft 365** | Outlook | Enterprise-grade | 95% — Good for Karim (corporate persona) |

**Why custom domain wins:**
- Platforms score based on domain age + email reputation
- Free providers (Gmail, Proton) have shared reputation — one spammer hurts everyone
- Custom domain = isolated reputation, aged domain = trust

### Domain + Email Prescription by Persona

| Persona | Domain | Email Host | Payment Method |
|---------|--------|------------|----------------|
| **Rami** | `ramikhoury.com` | **Fastmail** ($50/yr) | Crypto via Njalla, email paid via Privacy.com |
| **Lara** | `laranassar.co` | **Google Workspace** ($72/yr) | Separate Google account, Brazilian proxy billing |
| **Karim** | `karimhassan.me` | **Microsoft 365 Basic** ($48/yr) | Corporate vibe, UAE proxy billing |
| **Maya** | `mayafarhat.com` | **Google Workspace** ($72/yr) | US-based, normal payment |

**Critical Rules:**
1. **Never use Gmail/Proton as primary** — use only as backup/forwarding
2. **Domain age matters:** Buy domains 30+ days BEFORE account creation if possible
3. **SPF/DKIM/DMARC:** Must be configured or emails hit spam, platforms distrust
4. **Separate payment:** Each Workspace/Microsoft account uses different card/PayPal

---

## 3. PHONE NUMBER VERIFICATION — SMS & Calls

### ❌ What Gets Flagged as VOIP (Blocked by Meta/TikTok)

| Provider | Type | Platform Detection | Status |
|----------|------|-------------------|--------|
| **MySudo** | US VOIP | FCC VOIP database | ❌ Meta blocks |
| **Hushed** | US/UK/CA VOIP | VOIP number ranges | ❌ TikTok blocks |
| **Google Voice** | US VOIP | Known GV prefixes | ❌ Hard blocked by Meta |
| **Twilio** | API VOIP | Carrier lookup | ❌ All major platforms |
| **TextNow/TextFree** | Free VOIP | Heavily abused | ❌ Instant ban |

### ✅ Recommended: Real Mobile Numbers

| Provider | Type | Cost | Platform Pass Rate |
|----------|------|------|-------------------|
| **Daisy** (daisy.berlin) | EU mobile numbers, real SIMs | €15–25/month | 99% — Physical SIM in Germany |
| **Sakari** | Business SMS, some mobile | Varies | 70% — Mixed mobile/VOIP |
| **Onlinesim** (onlinesim.io) | Real Russian/CIS mobile numbers | Pay-per-SMS | 85% — Non-western, less abused |
| **SMS-Activate** (sms-activate.org) | Global real mobile numbers | $0.50–3 per SMS | 80% — Risk: shared numbers |
| **Physical SIM mail forwarding** | Actual SIM in target country | $30–60/month | 99% — Gold standard |
| **Maya only:** US prepaid (T-Mobile/AT&T) | Real US mobile | $15–30/month | 100% — Maya is US-based, natural |

### Country-Specific Phone Strategy

| Persona | Target Verification | Recommended Provider | Implementation |
|---------|---------------------|---------------------|----------------|
| **Rami** | WhatsApp, Telegram, possibly Meta | **Lebanese physical SIM** via mail forwarder OR **Onlinesim Lebanese numbers** | Lebanese numbers are premium; use Onlinesim or traveler-sourced |
| **Lara** | Facebook Brazil (critical) | **Daisy** EU number + Brazilian proxy, OR **Brazilian physical SIM** | +55 Brazil numbers are heavily abused; European number with Brazil proxy better |
| **Karim** | UAE platforms (less strict) | **UAE physical SIM** via Aramex/DHL forwarding | Most flexible — UAE accepts Gulf numbers broadly |
| **Maya** | All US platforms | **T-Mobile Prepaid** ($15 Connect plan) from Target/Amazon | 100% genuine US mobile, no issues |

**Verification Strategy by Platform:**

```
Instagram/Facebook: Strict on +1 US VOIP, less strict on EU real mobile
TikTok: Aggressive VOIP detection, requires real mobile
X/Twitter: Moderate — accepts Google Voice after account age
YouTube (Google): Accepts most numbers, triggers "suspicious" less often
Telegram: Least strict — accepts VOIP after initial restrictions lifted
```

---

## 4. PAYMENT METHODS — Untraceable & Platform-Safe

### ❌ What Links Accounts Together

| Method | Risk | Why |
|--------|------|-----|
| Same PayPal across personas | **Critical** | PayPal device fingerprinting links everything |
| Same credit card | **Critical** | Card BIN + billing address hard link |
| Same Privacy.com funding source | Moderate | Privacy cards still link to one bank |
| Crypto exchanges with KYC | Moderate | Exchange records if subpoenaed |

### ✅ Recommended: Payment Segregation

| Tier | Method | Provider | Best Use |
|------|--------|----------|----------|
| **Tier 1** | Virtual cards per persona | **Privacy.com** (US only) | Maya, Lara (US-based) — Each persona = unique Privacy card with unique funding source (different bank accounts/crypto) |
| **Tier 1 EU** | Disposable virtual cards | **Revolut Business** (EU) | Lara, Karim — EU virtual cards, separate Revolut accounts per persona |
| **Tier 2** | Crypto payment | **Monero (XMR)** | Domain purchases—Njalla accepts XMR, no KYC chain |
| **Tier 2** | Prepaid gift cards | **Visa/Mastercard prepaid** (cash purchase) | All personas — Buy with cash at retail, no name linkage |
| **Tier 3** | Local payment methods | **Brazilian Boleto** (Lara), **UAE Exchange** (Karim) | Use local persona payment culture |

**Payment Architecture:**

```
Maya:
  └─ Funding: US Bank A → Privacy.com virtual cards
  └─ Domains: Njalla (Monero payment)
  └─ SaaS: Privacy cards per service

Lara:
  └─ Funding: EU Bank → Revolut Business virtual
  └─ Domains: Njalla (Monero)
  └─ OR: Cash-bought prepaid cards

Karim:
  └─ Funding: UAE prepaid cards / Crypto
  └─ Domains: Njalla (Monero)

Rami:
  └─ Funding: Lebanese cash economy / Crypto
  └─ Domains: Njalla (Monero)
```

---

## 5. BROWSER & DEVICE FINGERPRINTING

### The Problem

Even with perfect IPs and emails, platforms fingerprint:
- Canvas/WebGL signature
- Fonts installed
- Screen resolution + timezone
- User agent + OS version consistency

If Rami uses Windows + Chrome from Beirut IP, then suddenly Mac + Safari from same IP = red flag.

### ✅ Recommended: Anti-Detect Browsers

| Tool | Cost | Best For | Notes |
|------|------|----------|-------|
| **Multilogin** | €99–199/month | Enterprise-grade, team sharing | Most robust, steep learning curve |
| **Adspower** | $36–96/month | China-based, good TikTok support | Cheaper alternative, works well |
| **GoLogin** | $49–99/month | Mid-market, easier UI | Good balance of features/price |
| **Incogniton** | $29–79/month | Solo operator | Newer, simpler, adequate for this scale |

**Recommended: Adspower or Multilogin**

### Configuration per Persona

| Persona | Profile Config | Consistency Rule |
|---------|----------------|------------------|
| **Rami** | Chrome (latest), Windows 10, Beirut timezone, Arabic + English lang | Always use this exact config |
| **Lara** | Chrome, macOS, São Paulo timezone, Portuguese + English | Brazilian user behavior |
| **Karim** | Chrome/Edge, Windows 11, Dubai timezone, Arabic + English | Gulf business user |
| **Maya** | Safari, macOS/iPhone, Detroit timezone, English | American activist |

**Critical Anti-Detect Settings:**
```
✓ Isolate Cookies/LocalStorage per profile
✓ Isolate Canvas/WebGL fingerprints per profile
✓ Match timezone to proxy location (auto-sync)
✓ Match WebRTC IP to proxy IP (leak prevention)
✓ Hardware fingerprint consistency (screen, fonts)
✓ Use "mobile" user agent for TikTok/Insta-mobile verification
```

---

## 6. DOMAIN REGISTRATION — WHOIS Privacy & Reputation

### ❌ What Leaks Identity

| Registrar | Issue |
|-----------|-------|
| GoDaddy | US subpoena-friendly, logs everything |
| Namecheap | "WhoisGuard" still has legal identity on file |
| Google Domains | Tied to Google account, massive data correlation |

### ✅ Recommended: Privacy-First Registrars

| Registrar | Whois Policy | Payment | Jurisdiction | Best For |
|-----------|--------------|---------|--------------|----------|
| **Njalla** | Anonymous registrant (they own domain) | BTC/XMR accepted | Nevis (Caribbean) | Lara, Karim, Rami — Truly anonymous |
| **OrangeWebsite** | Privacy protected | BTC accepted | Iceland | Maya — Iceland privacy law |
| **Porkbun** | Free WHOIS privacy | Cards/PayPal | US | Lower trust but cheap, use with Privacy.com |

**Njalla Model:**
- Njalla is the legal registrant, you are the beneficial owner
- They hold domain in trust, cannot be forced to reveal you via standard WHOIS
- If compelled: they have info, but jurisdiction makes it difficult

**Recommended Setup:**
```
All 4 domains via Njalla
Payment: Monero (XMR) via Feather wallet
No personal info submitted
```

---

## 7. OPERATIONAL SECURITY CHECKLIST

### Daily Operating Protocol

```
Before logging into any account:
  ✓ Anti-detect browser profile started
  ✓ Mobile proxy connected (verify IP matches persona country)
  ✓ Browser timezone matches proxy
  ✓ WebRTC leak test: https://browserleaks.com/webrtc
  ✓ No other persona accounts open
  ✓ No corporate VPN active

During session:
  ✓ No copy-paste of content between personas
  ✓ Different content templates per persona
  ✓ No shared Google Docs (use offline textfiles, air-gapped)
  ✓ Screenshot/media: separate asset folders per persona

After session:
  ✓ Close browser profile (saves state)
  ✓ Disconnect proxy
  ✓ Clear clipboard
  ✓ Log any anomalies
```

### Platform-Specific Account Creation Sequence

**With verified infrastructure:**

```
Day -7    → Buy domain via Njalla (age domain before use)
Day -3    → Warm up mobile proxy IP (browse normally via Adspower)
Day 1     → Create email (Workspace/Fastmail) via persona proxy
Day 1     → Verify email via real mobile number
Day 2     → Create Google account → YouTube
Day 3     → Create Facebook via warmed mobile proxy
Day 4     → Instagram (linked to FB, inherits trust)
Day 5     → X/Twitter via same proxy
Day 7     → Reddit (lower priority, less strict)
Day 10    → TikTok (most strict — use aged mobile IP)
Day 14    → Telegram (least strict)
Day 30+   → Begin content once account age sufficient
```

---

## 8. BUDGET SUMMARY

### Per Persona Setup Cost (One-Time)

| Item | Cost | Notes |
|------|------|-------|
| Domain (1yr) | $15–25 | Njalla with crypto |
| Email hosting (1yr) | $48–72 | Workspace/Fastmail/365 |
| Mobile proxy (1mo) | $150–300 | Setup month, then reduced |
| Phone number (monthly) | $15–50 | Real mobile, varies by country |
| Anti-detect browser | $30–75 | Shared cost, or per persona |
| Content creation tools | $50 | Canva Pro, etc. |
| **Total per persona** | **$300–600** | First month |
| **Total × 4** | **$1,200–2,400** | First month |

### Monthly Ongoing (4 personas)

| Item | Monthly | Total |
|------|---------|-------|
| Mobile proxies (reduced footprint) | $80–150/persona | $320–600 |
| Phone numbers | $15–30/persona | $60–120 |
| SaaS (Canva, scheduling, etc.) | $50 shared | $50 |
| **Monthly total** | | **$430–770** |

---

## 9. RISK: WHAT IF ACCOUNTS GET BANNED?

### Platform Response Protocol

| Scenario | Response | Prevention |
|----------|----------|------------|
| Phone verification loop | Use backup number, then switch to primary | Always have 2 numbers per account |
| "Suspicious activity" lock | Wait 24hr, no immediate retry | Never rapid-fire actions on new accounts |
| Full ban | Abandon persona, analyze pattern | Was it IP? Payment? Content? |
| Shadowban (算法降权) | Shift content style, reduce frequency | Engagement velocity moderation |

**Backup Plans:**
- Each persona should have 2 phone numbers registered (primary + backup)
- Each domain should have catch-all email (catches password resets if needed)
- Maintain "clean" Reddit/Telegram as fallback verification channels

---

## 10. QUICK REFERENCE: PROVIDER SELECTION

| Need | Primary Choice | Backup | Avoid |
|------|---------------|--------|-------|
| **Lebanon IP** | Oxylabs Beirut mobile | Local ISP VPN | Mullvad Lebanon (flagged) |
| **Brazil IP** | Oxylabs São Paulo mobile | Windscribe static residential | Hushed + Brazil VPN |
| **UAE IP** | Oxylabs Dubai mobile | Astrill | European VPN claiming UAE |
| **US IP Detroit** | Bright Data residential | US ISP VPN | Free VPNs, datacenter |
| **Email — Rami** | Fastmail custom domain | Zoho | ProtonMail primary |
| **Email — Others** | Google Workspace | Microsoft 365 | Free Gmail primary |
| **Phone — Maya** | T-Mobile Prepaid | AT&T Prepaid | Google Voice |
| **Phone — Others** | Onlinesim/Daisy | Physical SIM mail | MySudo, Hushed |
| **Payment** | Privacy.com / Revolut | Crypto (XMR) | Same card across accounts |
| **Domains** | Njalla | OrangeWebsite | GoDaddy, Namecheap (KYC heavy) |
| **Browser isolation** | Multilogin | Adspower | Chrome profiles (insufficient) |

---

*This document reveals operational security level detail. Handle as CONFIDENTIAL.*