How I Fingerprint My Own API to Catch Scrapers
Trap streets, phantom records, and the watermarking tricks that catch scrapers

Trap streets, phantom records, and the watermarking tricks that catch scrapers

Why transformed data still reveals where it came from

How a practical joke turned into an LLM honeypot, two free security tools, and a canary endpoint that fingerprints AI scrapers.

I built security for "no one's looking." The open web is "everyone's looking." This is the post mortem of closing that gap. The thesis: identity + perimeter shift + observability beats reactive blocking.
