Your public IP address, browser, OS, and privacy header status — including Do Not Track (DNT) and Global Privacy Control (GPC) — detected instantly, server-side. Zero JavaScript. Zero tracking.
Your IP Address: 216.73.217.65Your public address is visible to websites and services you connect to. It can reveal an approximate network location and may be associated with activity over time, especially when combined with account or browser data. A VPN or Tor can mask your network address from the destination, but shifts trust to the service or network you use.
DNT is a legacy, non-binding request for sites not to track you. It does not block tracking or provide security. Because it is an optional browser signal, sending it may add a small fingerprinting clue. If you do not rely on it, you can turn it off in your browser; avoid replacing it with a fabricated header.
GPC communicates an opt-out preference to sites that recognise it, including where applicable under privacy laws. It is not an anonymity or security control, and any uncommon preference can contribute to browser fingerprinting. Use the browser's built-in setting rather than spoofing the header, and weigh the opt-out signal against that small additional clue.
This is a best-effort guess from your User-Agent string. Browser families and versions can help sites tailor content, but unusual or conflicting browser signals can make a device easier to distinguish.
This is a best-effort guess from your User-Agent string. Operating-system details narrow the set of possible devices and can become more identifying when combined with browser version, language, and other settings.
This header describes the browser and platform to the server. It can reveal more detail than the summary above and is one of several values used for fingerprinting. Modern browsers may reduce or standardize some of this information.
This can identify the page that sent you here, sometimes including its path or query string. Browsers and sites often restrict referrer details, but URLs can still disclose sensitive information if they contain it.
This is the host name configured for the web server handling this request, not a name or identifier from your device.
This is the temporary source port observed by the server for the connection. It is normally assigned automatically and is not a port that identifies an application listening on your device.
This is the HTTP protocol version reported by the server environment. It does not tell you whether the connection used HTTPS; the address bar and certificate are the relevant checks for transport encryption.
This identifies the HTTP operation used for this request, commonly GET. It is normal request metadata and usually reveals little by itself.
These are parameters in the page URL. Avoid putting passwords, access tokens, or other secrets here: URLs can be stored in browser history, server logs, and sometimes referrer data.
This preference helps sites choose a language. A distinctive language list or ordering can contribute to fingerprinting when combined with other browser details.
This header lists content formats the browser can handle. It is commonly used for content negotiation; unusual values or a mismatch with other browser headers may stand out.
This is connection-management metadata. It is commonly omitted or handled differently by newer HTTP versions and is not a reliable privacy or security indicator.
SurfaceScan checks scripts, cookies, third-party resources, fingerprinting signals, and security headers.
Open SurfaceScan →