Public IP
Server-observed
Querying the diagnostic endpoint…
Request origin
Proxy-observed
These headers are diagnostic only. Their presence or absence never proves a proxy on its own.
Workstation
Browser-observed
IP comparison
A difference between the two addresses can indicate a proxy, NAT, VPN or any intermediate infrastructure. It is an indicator, not a proof.
Browser information
Browser-observed
Browser network APIs
Capabilities exposed by this browser. No protection is bypassed.
DNS diagnostics
Server-observed Resolution performed by the diagnostic backend, not by the workstation resolver.
| Domain | Result | IPv4 | IPv6 | Time |
|---|
Connectivity tests
Server-observed
| Test | URL | Status | Time | Content-Type | Length | Redirect | Result |
|---|
Network performance
Browser-observed Tests are approximate and affected by network conditions.
HTTP headers received by the server
Server-observed Sensitive values (cookies, authorization) are redacted.
Loading…
Proxy detection
0 proxy-related header(s) observed. A single indicator is never enough to conclude that a proxy is present — correlate with IP comparison, cache behaviour and TLS inspection.
Proxy / cache detection
| # | Token | Cache-Control | Age | X-Cache | Via | ms |
|---|
Websites tests
Each site is probed twice: from this workstation's browser and from the diagnostic backend. A difference points at local filtering.
| Site | Browser | Browser time | Server HTTP | Redirect | Server time | Result |
|---|---|---|---|---|---|---|
Google https://www.google.com | Running | — | — | none | — | Testing |
YouTube https://www.youtube.com | Running | — | — | none | — | Testing |
Microsoft https://www.microsoft.com | Running | — | — | none | — | Testing |
GitHub https://github.com | Running | — | — | none | — | Testing |
Wikipedia https://www.wikipedia.org | Running | — | — | none | — | Testing |
Cloudflare https://www.cloudflare.com | Running | — | — | none | — | Testing |
Amazon https://www.amazon.com | Running | — | — | none | — | Testing |
HTTP only site http://neverssl.com | Running | — | — | none | — | Testing |
HTTPS reference https://example.com | Running | — | — | none | — | Testing |
Content filtering tests
Browser-observed Embedded content reveals CSP, X-Frame-Options and category-based blocking.
YouTube embed (standard)
https://www.youtube.com/embed/aqz-KE-bpKQ
Loading…
YouTube embed (nocookie)
https://www.youtube-nocookie.com/embed/jNQXAC9IVRw
Loading…
YouTube embed (playlist)
https://www.youtube.com/embed/videoseries?list=PLbpi6ZahtOH6Blw3RGYpWkSByi_T7Rygb
Loading…
Vimeo player
https://player.vimeo.com/video/76979871
Loading…
Google Maps embed
https://maps.google.com/maps?q=paris&output=embed
Loading…
OpenStreetMap embed
https://www.openstreetmap.org/export/embed.html?bbox=2.2,48.8,2.4,48.9
Loading…
YouTube thumbnail (i.ytimg.com)
https://i.ytimg.com/vi/aqz-KE-bpKQ/hqdefault.jpg
YouTube static (s.ytimg.com)
https://s.ytimg.com/yts/img/favicon_32-vflOogEID.png
External resources matrix
Browser-observed
| Resource | Domain | Type | Load time | Detail | Result |
|---|---|---|---|---|---|
| Image (Wikimedia) | upload.wikimedia.org | image | — | … | Running |
| Image (Google static) | www.gstatic.com | image | — | … | Running |
| JavaScript (cdnjs) | cdnjs.cloudflare.com | script | — | … | Running |
| JavaScript (jsDelivr) | cdn.jsdelivr.net | script | — | … | Running |
| CSS (unpkg) | unpkg.com | css | — | … | Running |
| Font (Google Fonts) | fonts.googleapis.com | font | — | … | Running |
| API (JSON endpoint) | api.github.com | api | — | … | Running |
| API (Cloudflare trace) | www.cloudflare.com | api | — | … | Running |
Zscaler URL filtering test
Categories mirror Zscaler ZIA URL Filtering families. The category shown is the expected category, not a category returned by Zscaler.
No test run yet. Results are observed behaviour, not a Zscaler policy read-out.
Policy matrix
| Family | Expected category | Domain | Browser | HTTPS | HTTP | Time | Result |
|---|---|---|---|---|---|---|---|
| Run a test profile to populate the matrix. | |||||||
Network baseline
Save the results of a reference network, then compare them from another network.
No baseline loaded.
TLS / certificate diagnostics
Server-observed
SSL inspection
Certificate details are not available programmatically. Open the padlock in your browser and check the issuer: a corporate or security-vendor CA instead of a public CA may indicate TLS interception by a proxy. Interpret this with caution — the issuer name alone never proves which product performs the inspection.
Security headers
Headers returned by this diagnostic site. Network diagnostic only, not a security audit.
CORS diagnostics
Server-observed
WebSocket connectivity
Browser-observed Proxies that do not allow the Upgrade header fail here.
Test a URL
Only the URL you type is tested. Internal addresses and non-standard ports are rejected.
Session history
Tests run since this page was opened. Nothing is stored server-side.
No test run yet.