IP & geolocation
Your public address — what every site sees first.
Reading the live environment…
Live tracker scan
The detector didn't match any known profile — you might be on a very new build, a custom fork, or a privacy-hardened environment we haven't catalogued yet. Scanner results below are still accurate per-vector.
Defense Mode Profile
Probing 22 vectors…
What every HTTP server sees before you render a pixel.
Your public address — what every site sees first.
Reading the live environment…
Your encrypted handshake has a unique shape — and CDNs are reading it.
Reading the live environment…
Which resolver actually answers your queries — and is the path encrypted?
Reading the live environment…
Your VPN may not be hiding the LAN address WebRTC offers up.
Reading the live environment…
Rendering, hardware, and locale details hashed into a near-unique ID.
Render text on a canvas, hash the pixels — your GPU + driver + fonts make a near-unique signature.
Reading the live environment…
WebGL exposes the unmasked GPU vendor + renderer string in many builds — that alone narrows you to a few thousand.
Reading the live environment…
An inaudible sine wave through a compressor — your audio stack hashes uniquely.
Reading the live environment…
Probe ~100 known fonts via measurement; the ones you have leak software you've installed.
Reading the live environment…
Tor canonicalises to UTC. Your browser doesn't.
Reading the live environment…
The next-gen graphics API is even more revealing than WebGL — and the protections lag.
Reading the live environment…
What your browser announces — UA-CH supplements, never replaces.
Reading the live environment…
Twelve little fields your browser tells every site without asking.
Reading the live environment…
Your monitor, taskbar, and devicePixelRatio in clear text.
Reading the live environment…
The TTS voices on your device leak your OS + installed language packs.
Reading the live environment…
Without permission, your browser still leaks how many cameras/mics/speakers you have.
Reading the live environment…
Physical readings surfaced to JavaScript without a prompt.
Chrome desktop still exposes it. Your discharge curve can re-link sessions across cookie clears.
Reading the live environment…
The silent Permissions API bitmap — the shape is the fingerprint.
Twenty-three names probed silently — the SHAPE is the fingerprint, not the count.
Reading the live environment…
What the browser will hand a third-party script and how long it lingers.
What your browser will hand to a script from a different origin.
Reading the live environment…
Tracking primitives smuggled through HTTPS, caching, and tab icons. Mostly fixed in 2026 — surface what we observe.
Reading the live environment…
Signals from what you've installed or how you interact.
Chrome's web_accessible_resources still leak which extensions you have.
Reading the live environment…
Linkage across origins and the cookies every CDN drops on you.
Where you came from, and which IdPs you're already signed into.
Reading the live environment…
`__cf_bm`, `_abck`, `_px` — the same cookie following you across most sites.
Reading the live environment…