{"slug": "i-built-a-page-that-shows-how-websites-see-you-behind-a-vpn-ip-dns-timezone-open", "title": "I built a page that shows how websites see you behind a VPN (IP, DNS, timezone, fingerprint), open source", "summary": "Developer Yang published who.1ms.dog, a free, MIT-licensed open-source page that displays the signals a website can read before login — exit IP (v4 or v6), ASN/provider, rough location, the DNS resolver actually answering lookups, timezone and browser-language consistency with the IP, and a browser fingerprint covering canvas, fonts, GPU, screen/refresh rate and user agent, plus headless/automation hints. The page grades visitors A/B/C on how consistent they look to a website rather than how safe they are, and Yang lists known weak spots including an empty page without JavaScript, Cloudflare sitting in front of the server (partly blocking it in Russia), no separate IPv4 exit evaluation on IPv6 connections, and a mobile Chrome false positive in the automation heuristic. Yang is asking for reports of setups the tool misreads, such as OPNsense/pfSense with WireGuard, Pi-hole/unbound, split tunnels and IPv6-only networks.", "body_md": "Hi all, first post here.\n\nDisclosure up front: I made this. [who.1ms.dog](https://who.1ms.dog) (“Who Are You”) is part of my small set of network tools at 1ms.dog. It’s free, no account, and the source is MIT: [github.com/yt1988/who-are-you](https://github.com/yt1988/who-are-you). I used AI help to tidy up this write-up; I’ll answer questions in the thread myself.\n\n**Why I built it:** a recurring theme in threads like the one about VPN exit IPs getting flagged for abuse is that a VPN swaps your IP, but a site still gets a dozen other signals, and when those signals disagree you look *more* suspicious, not less. I wanted one page that lays out what a site can see before you log in, and where the pieces don’t line up.\n\n**What it shows:**\n\n- Exit IP (v4 or v6, whichever you connected with), ASN/provider, rough location\n- Which DNS resolver actually answers your lookups, and whether it’s in the same country as the exit IP\n- Whether system timezone and browser language match the IP (classic: Mullvad exit in Boston, clock on Europe/Berlin)\n- Browser fingerprint: canvas, fonts, GPU, screen/refresh rate, user agent, plus some headless/automation hints\n- How rare that combination is among visitors to the page so far\n\n**Things worth comparing:**\n\n- LibreWolf / Firefox with `privacy.resistFingerprinting` vs. stock Chromium\n- Mullvad Browser or Tor Browser defaults\n- Router-level WireGuard vs. a browser proxy extension (the extension case often leaks a different DNS/timezone story)\n\n**Known weak spots, so you don’t have to dig:**\n\n- Without JavaScript the page is empty, even though IP and DNS would still be visible server-side.\n- It sits behind Cloudflare, so the server only sees headers as Cloudflare forwards them. (Also means it’s partly blocked in Russia.)\n- On an IPv6 connection it doesn’t separately evaluate your IPv4 exit.\n- The A/B/C grade measures “how consistent do you look to a website”, not “how safe are you”. Tor + VPN gets a worse grade even though nothing real is leaking. I probably need to word that better.\n- “Unique” means unique among visitors of this page, not the whole internet.\n- Mobile Chrome can trip the automation heuristic in some cases; that’s a known false positive I’m looking at.\n- Anonymous counting can be turned off on the page, and with GPC (Global Privacy Control) enabled nothing is counted.\n\nWhat I’d most like from this crowd: cases where it gets your setup wrong (OPNsense/pfSense + WireGuard, Pi-hole/unbound, split tunnels, IPv6-only), and signals you’d expect a site to check that it doesn’t.\n\nYang", "url": "https://wpnews.pro/news/i-built-a-page-that-shows-how-websites-see-you-behind-a-vpn-ip-dns-timezone-open", "canonical_source": "https://forum.level1techs.com/t/i-built-a-page-that-shows-how-websites-see-you-behind-a-vpn-ip-dns-timezone-fingerprint-open-source/260600#post_1", "published_at": "2026-11-14 04:43:59+00:00", "updated_at": "2026-11-14 05:51:19.182771+00:00", "lang": "en", "topics": ["ai-crawlers"], "entities": ["who.1ms.dog", "1ms.dog", "Yang", "Cloudflare", "Mullvad", "Tor Browser", "LibreWolf", "GitHub"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/i-built-a-page-that-shows-how-websites-see-you-behind-a-vpn-ip-dns-timezone-open", "markdown": "https://wpnews.pro/news/i-built-a-page-that-shows-how-websites-see-you-behind-a-vpn-ip-dns-timezone-open.md", "text": "https://wpnews.pro/news/i-built-a-page-that-shows-how-websites-see-you-behind-a-vpn-ip-dns-timezone-open.txt", "jsonld": "https://wpnews.pro/news/i-built-a-page-that-shows-how-websites-see-you-behind-a-vpn-ip-dns-timezone-open.jsonld"}}