So after extensive testing I've come to the conclusion there are two main factors that will determine how quickly you are detected and banned. The first is Mirror Mode, of course, but most scripts don't work well with it. Anyway, it's not the scripts, it's not the client, it's not account age or stats or any of that, these are all afterthoughts. The main thing that will prevent you getting banned right away is a Residential IP. If you can't use Mirror Mode (or equivalent on other clients), then Residential proxies are 100% mandatory, it's not even a debate. I've tested this with many bot clients including OSBot and almost every time I use a DCH proxy, that account will be banned in under 2 days in stealth injection. Using the same scripts on my home IP, nearly every account lasts a week, more often a month, or longer, and when they do get banned, it's a 2 day ban, rarely permanent. Even the godawful p****bot flies under the radar on home IPs for weeks at a time.
How could this be? We know certain types of IPs can get flagged, but more specifically, Jagex's system seems to flag your account for botwatch as soon as you connect with these flagged IPs, meaning botwatch will be analyzing your account at all times on types of IPs legitimate players never use. This would the reason why we get detected right away when we try to run scripts on any datacenter proxy. Residential IPs are used by every legit player and so botwatch is not analyzing accounts on Residential IPs 24/7, therefore we get away with running scripts until enough activity alerts Jagex's system. This is just my theory based on testing. I'm pretty sure a Residential IP can become flagged if enough bots are banned in association with it.
Now, besides the fact that botting on your home IP can get your real accounts chain-banned, after a few bots it's not scalable at all. Residential SOCKS proxies are extremely hard to come by, I've only found localproxies.com and a few RDP servers with residential ips as realistic options, but these are both very limiting because they're not static/dedicated, or the RDPs are scarce from sketchy providers.
Sure, it may be possible you can find datacenter proxies that will last your accounts at least a week, but I haven't had any luck finding them. Meanwhile, Residential IPs are literally the holy grail of botting.
If anyone knows a good source of dedicated Residential proxies or any other kind of proxy that works for that matter, please share it so we can at least break even on these overpriced bonds ?. I'll keep searching and testing.