THEY KNOW
WHO YOU ARE
In 100ms. Without cookies. Without login. Your digital identity is an open book.
What they see
Your surveillance profile
This is the profile that exists about you. Some of it is collected before the page even loads. The rest — within the first second. No cookies needed.
All of this — before the page loads.
The first 100 milliseconds
What happens when you press Enter
Faster than you can blink. One tenth of a second. This isn't some exotic government program — it's standard infrastructure.
Your first packet betrays you
Every OS implements TCP differently. Windows skips the timestamp option. iOS adds unique padding. The Maximum Segment Size reveals VPN type — WireGuard, OpenVPN, IPsec each produce different values. JA4T can distinguish T-Mobile from Verizon from a single SYN packet.
Twenty trillion permutations defeated by sorting
Your Client Hello lists cipher suites, extensions, elliptic curves — a detailed résumé of your software stack, delivered unencrypted. In 2023, Chrome started randomizing extension order: 20.9 trillion possible JA3 hashes from one browser. JA4 sorts them back. One sort function defeated the most sophisticated defense in browser history.
Your browser's hardcoded confession
Even inside the encrypted tunnel, HTTP/2 SETTINGS frames are hardcoded by browser developers. Chrome requests 15,663,105 bytes window. Firefox requests 12,517,377. Pseudo-header order: Chrome sends m,a,s,p. Firefox sends m,p,a,s. Safari sends m,s,p,a. Arbitrary choices, permanent accents.
Canvas, WebGL, Audio — your browser draws its own mugshot
The page loads and JavaScript fires. Canvas renders a hidden image — your GPU, drivers, and font rasterizer produce a unique hash. WebGL queries your graphics card model. AudioContext measures DAC characteristics. Screen resolution, installed fonts, navigator properties, timezone — dozens of values harvested in one frame.
How they use it
Three industries. Same data.
Ad Networks
Track you across sites without cookies. Canvas + WebGL fingerprints persist through incognito mode, cookie clearing, IP changes. Your fingerprint is your permanent ad ID.
Result
You see 'personalized' ads for shoes you looked at once — across every device, every browser, every session.
Banks & Antifraud
Detect device spoofing through consistency checks. GPU doesn't match User-Agent? Timezone contradicts IP geolocation? Mobile flags present but no gyroscope? Fraudster.
Result
Your transaction is silently flagged. Extra verification required. Or silently declined.
State Censorship
Identify VPN traffic through TLS/JA4 fingerprinting. VPN changes your IP but the MSS in your first TCP packet reveals tunnel overhead. The TLS handshake looks nothing like a real browser.
Result
Your VPN connection is throttled, blocked, or logged for future reference.
Your digital shadow
A fingerprint as unique as DNA
99.7%
of browsers have a unique fingerprint
months
average fingerprint lifetime
0
cookies needed to track you
Your fingerprint survives:
- Cookie clearing
- Incognito mode
- IP address change
- Browser restart
- VPN on/off
- User-Agent spoofing
- DNS change
- Device reboot
- Account logout
- Browser update
“You don't browse the internet. You are browsed.”
Can you hide?
Every tool has a blind spot
VPN
- Hides: IP address
- Reveals: MSS reveals tunnel type (WireGuard, OpenVPN, IPsec). TLS fingerprint unchanged.
Incognito
- Hides: Cookies, history
- Reveals: TCP options, TLS Client Hello, HTTP/2 SETTINGS — identical to normal mode.
Anti-Detect Browser
- Hides: Fingerprint (Canvas, WebGL)
- Reveals: Consistency breaks: GPU ↔ Canvas mismatch, timezone ↔ GeoIP mismatch, automation markers.
Tor Browser
- Hides: TLS fingerprint (normalized)
- Reveals: HTTP/2 priority tree with streams 3,5,7,9,11 — unique to Firefox. Server still knows.
Browsers cannot modify protocol-level fingerprints. VPN won't save you. Anti-detect won't help. Incognito is a lie.
Same optics
We built antifraud. Now we give you the same optics.
WHOX lets you find out what they already know about you. Look in the mirror — and see yourself the way the internet sees you.
300+
signals analyzed
<100ms
fast check
6
detection layers
In Antarctica, sometimes a penguin separates from the colony and walks toward the mountains. 70 kilometers across the ice. Even if brought back — it will turn and walk again.
No one knows why.
— Werner Herzog, "Encounters at the End of the World"