HN Explorer

Show HN: Detect paid Cloudflare plans on any website via ECH (experiments.pawelpokrywka.com)

1 points by rapawel ↗ HN
A tool that checks if any website uses a paid Cloudflare subscription by examining their public /cdn-cgi/trace endpoint. Cloudflare only allows disabling Encrypted Client Hello (ECH) in paid plans, so sni=plaintext indicates a paid subscription. Works on any Cloudflare-proxied site.

4 comments

[ 3.9 ms ] story [ 16.9 ms ] thread
phillipseamore
Seems like this might a wrong assumption (or CF changed something). Just tested one of my own sites that's on the free plan and it has "sni=plaintext".