For the past two weeks, I’ve been independently researching ways to bypass Supercell’s anti-fraud system. My goal is to contact Clash of Clans support to recover my account, but they refuse and block me.
I am not a programmer and had no prior experience with phones, so this has been a steep challenge. All I have is persistence and motivation.
1. Device and Tools Used
Device: Xiaomi Redmi 7
Tools: Magisk (with various modules and settings)
2. Achievements
Successfully spoofed phone information for multiple apps, including KernelSU, Fingerprint OSS Demo, DevCheck, etc.
Passed checks like AppList Detection, Momo, Play Integrity, and Root Beer Check Sample
3. Problem
Clash of Clans consistently detects Zygisk injection.
4. Steps Attempted
Considered reflashing the phone with modified identifiers:
Device ID
Android ID
GSF ID
Media DRM ID
Device Fingerprint
Created custom firmware using avbtool, ChatGPT, and DeepSeek
Modified system.img and vendor.img, specifically build.prop:
Code:
ro.vendor.build.fingerprint
Code:
ro.vendor.build.id
Code:
ro.build.version.bsp
Replaced
Code:
"QKQ1.191008.001"
with
Code:
"QKQ1.191003.001"
to generate a new device fingerprint
5. Outcome
All unique identifiers were changed successfully
However, Clash of Clans still recognized the device
6. Notes
IMEI and MAC address were not changed (can apps access them or not?)
I have been exhausted over these two weeks, working from morning until night, but I lack the necessary knowledge
I really hope for your tips and advice. Looking forward to your response.