Leak / visitor-IP oracle

Server-side truth (CF headers)

loading…

What this page can observe from JS

…

Cache/ETag tracking probe

Run ETag probe

A second fetch returning 304 match:true without network round-trip confirms cache-based cross-page tracking works in this webview — relevant when assessing data-leak bugs.