System Properties
Your machine as the edge sees it: everything one HTTP request from your browser revealed to this site. None of it is logged, none of it is stored. Close this tab and it's gone.
🖥 Device Manager · this connection
- 🖧 Network adapter Anycast edge, colo CMH (Anthropic, PBC, AS16509)
- 🔒 Security coprocessor TLSv1.3 AEAD-AES256-GCM-SHA384
- 🌐 Transport HTTP/2
- 🌍 Region Columbus, US (America/New_York)
- 🖥 Client a bot on an unknown OS
What guards all this: Security Center
Network adapter
- IP address
- 216.73.217.176
- ISP / ASN
- Anthropic, PBC (AS16509)
- Country
- US (NA)
- Region
- Ohio
- City
- Columbus (43215)
- Timezone
- America/New_York
- Approx. coords
- 39.96118, -82.99879 (see on map)
- Cloudflare colo
- CMH (nearest CF data center serving you)
- TCP round-trip
- 1 ms
- QUIC round-trip
- 0 ms (only set on HTTP/3, so it and the TCP row never both appear)
- Delivery rate
- 1846938 B/s (most recent edge estimate for this connection)
Transport and security
- HTTP version
- HTTP/2
- TLS version
- TLSv1.3
- TLS cipher
- AEAD-AES256-GCM-SHA384
- Accept-Encoding
- gzip, br
- Stream priority
- weight=16;exclusive=0;group=0;group-weight=0
- TLS extensions
- XrS7XQCueUPNYGmbwZDA6n4tHUo= (SHA-1 of the extension list)
Edge Trace
Seven things Cloudflare's edge knows about this connection that
it never tells the worker. request.cf carries geography, TLS
version and protocol, but not whether your SNI was encrypted, nor whether you
arrived through WARP. Those live only in
/cdn-cgi/trace, so this section is
the one part of the page your browser fetches for itself, from this same
origin, after the page has loaded.
- Encrypted SNI
- …
- Key exchange
- …
- HTTP version seen
- …
- Through WARP
- …
- Through Zero Trust
- …
- Browser isolation
- …
- Edge sliver
- …
Fetching…
Computer
- Best guess
- a bot on an unknown OS
- User agent
- Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
- Languages
- —
- Do-not-track
- not set
This session
- Received at
- 2026-08-19T21:51:41.651Z
- Referrer
- (none)
- Cookies sent
- none
- Cloudflare ray
- a2dc618d4a2fa0ea (the edge's id for this one request)
What I Can't See
- Your DNS resolver or protocol. Your resolver answers the name before the request reaches this site, so I only see the IP that connected. HTTP/3 implies a modern network stack that probably speaks DoH, though I can only infer that; the request itself never carries your resolver.
- Your real identity unless you've told me. An IP isn't a name.
- The rest of your browsing. I see this one request, nothing else.
- The contents of any encrypted data outside this HTTP session. TLS is doing its job.
Want This To Leak Less?
- Use a VPN or Tor. Either one changes your IP, ASN, and geo. Tor also anonymizes most fingerprintable details.
- Use a private browsing window. It drops cookies and language hints, somewhat.
- Set
DNT: 1or use a browser that does. Almost no servers honor it, though it's still a signal. - Strip the user-agent. Some browsers and extensions let you fake or hide it, which shrinks your fingerprinting surface.
About this page: The Cloudflare edge renders it. Your
browser never speaks to a third party. There are exactly two outbound
calls: one server-side RDAP lookup to your IP's registry, which the edge
caches for 24h so visitors from the same block don't re-hit ARIN, and the
Edge Trace section's fetch of
One script on every page is not mine: since 2026-08-06 the Cloudflare edge injects
Analytics: none. No page loads a Web Analytics or RUM beacon, and this Worker exposes no browser-timing collector. Page-load timings are not sent to Cloudflare.
/cdn-cgi/trace, which your own
browser makes to this same origin because those seven fields are the ones
the worker is never told. The data above lives for as long as
it takes to render, then nothing writes it to storage. View-source if you
want, since it's a single JavaScript file you can read end-to-end.
One script on every page is not mine: since 2026-08-06 the Cloudflare edge injects
<script type="module" src="/.webmcp/bridge.js"> into every
HTML document here, after this worker has finished with it. It is 47KB of
Cloudflare's code, served from this origin, and it is the reason View Source
shows a tag no file in the repository contains. What it does: if your browser
implements document.modelContext — today that means Chrome
146 with experimental web platform features on — it reads this site's own
/mcp server and registers those tools into the page, so an
agent browsing here can call them instead of scraping. Every other browser,
which is nearly all of them, downloads it, finds no such API, writes one
warning to the console, and stops. So the honest description is that most
visitors pay 47KB for nothing, and the site is betting that changes.
Analytics: none. No page loads a Web Analytics or RUM beacon, and this Worker exposes no browser-timing collector. Page-load timings are not sent to Cloudflare.
