Blog

Technical research on ISP surveillance, privacy detection techniques, and network-level tracking.

March 11, 2026·5 min read

What's New: ECH Detection, Quad9 Support, Score Fix & a Live Globe

We shipped Encrypted Client Hello as a real scored check, added Quad9 DNS detection, fixed a scoring bug that inflated some scores by up to 28 points, and added a live global activity globe to the homepage and leaderboard.

changelogECHQuad9DNS privacyscoringnew features
December 19, 2025·7 min read

ISP vs VPN: What Actually Changes (And What Doesn't)

A VPN shifts who sees your traffic: your ISP out, VPN provider in. Whether that's an improvement depends on which one you trust less. A practical breakdown of what changes, what doesn't, and how to verify your VPN is doing anything at all.

VPNprivacyDNS leakWebRTC leaktrust model
November 6, 2025·6 min read

What Your ISP Can Actually See When You Browse

HTTP vs HTTPS, DNS queries, SNI, traffic metadata, deep packet inspection. A precise breakdown of what is and isn't visible to your internet provider at every layer of the stack.

ISP surveillanceHTTPSDNSmetadatadeep packet inspection
October 14, 2025·8 min read

ISP Header Injection Explained: X-UIDH Supercookies, Detection & Middleboxes

Verizon injected a unique tracking identifier into every HTTP request for years. Your ISP may still be doing something similar. Here's the technique we use to detect it, running entirely from your browser with no install required.

header injectionUIDHsupercookiemiddleboxmethodology
How the Test Works

Curious about the technical methodology behind our privacy checks? We explain every signal we detect, how we score it, and the limitations of browser-based detection.

Read the methodology →