Back to browse
I built a tool that checks if your ISP is spying on you

I built a tool that checks if your ISP is spying on you

by chjose·Mar 4, 2026·7 points·0 comments

AI Analysis

●●SolidSolve My ProblemShip It

Real ISP tracking detection (supercookies, DNS hijacking) with anonymized leaderboard.

Strengths
  • Detects Verizon UIDH supercookies and other non-obvious ISP surveillance tactics that most users don't know exist
  • Clever use of Cloudflare debug endpoint and resolver fingerprinting to identify TLS interception without server-side IP logging
  • No signup, no install, no IP storage—privacy audit runs entirely in browser with hashed daily-rotating salt
Weaknesses
  • Results are informational only; doesn't help users fix the problem, only discover it
  • Depends on external services (ipinfo ASN lookups, Cloudflare debug) so reliability varies by ISP
Category
Target Audience

Privacy-conscious internet users, ISP transparency advocates

Similar To

Cloudflare Browsing Experience Security Check · Privacy Badger

Post Description

The site runs 4 checks directly from your browser in ~5 seconds:

* Header injection — echoes your HTTP headers back through a server-side endpoint to detect UIDH supercookies (Verizon injects these at the network level, visible even in private browsing), AT&T tracking headers, Blue Coat proxy markers, and subscriber IDs

* DNS privacy — checks your resolver's ASN via ipinfo to see if it's your ISP's own DNS (which logs every domain you visit) or a private resolver like 1.1.1.1 / 9.9.9.9

* TLS interception — hits the Cloudflare debug endpoint to detect middlebox fingerprints that indicate your "encrypted" connection is being terminated before it reaches the destination

* Leaderboard — anonymized aggregate scores by ISP, so you can see how your provider compares to others

No sign-up, no install, no IP storage (IPs are hashed with a daily-rotating salt). Tech stack is Next.js + Supabase on Vercel.

Similar Projects

Security●●Solid

Khaos – Every AI agent I tested broke in under 30 seconds

Auto-patching LLM calls to inject faults and log telemetry is a neat technical trick that lets you fuzz real agent runs without changing your stack. The repo ships six intentionally vulnerable example agents and a CLI (discover/run/ci) with eval packs for security and resilience, so you can reproduce attacks and gate releases. It feels like an early, practical toolkit that fills a gap in agent security testing — adoption and more community-playbooks will determine how far it goes.

Big BrainNiche Gem
exordex
113mo ago