Might be http://witch.valdikss.org.ru/ , e.g., using number of flows and MTU (and maybe other techniques)

> Might be http://witch.valdikss.org.ru/

I think so! It looks slightly different than how I remember it but same elements in there, thanks for sharing it.

> No OpenVPN detected.

Looks like Mullvad is clear.

Also in case anyone was curious about the name and image, I haven't thought about this series in forever: https://en.wikipedia.org/wiki/W.I.T.C.H._(TV_series)

>OpenVPN detected.

Not for me. It detected Mulvad

ProtonVPN passes too which is funny because I'm solving so many captchas I could power an entire captcha solving saas all by myself. So I'm not entirely convinced by this method.

That's because most sites serve you a captcha based on your IP address and ASN.

Mullvad uses both OpenVPN and Wireguard

And the site seems to tend to detect mullvad's wireguard as 'openvpn' while mullvad's openvpn is undetected by it. Perhaps that's what the parent is referring to.

That would make sense because it didn't detect Mullvad's openvpn for me.

All Vypr obfuscation options pass. I'm surprised more people don't use VyprVPN, but then again, it's professional options are limited. I.e. surfshark's ability to choose specific data centers and IPs.But I bought 5 years of Vypr for like 50 bucks 3 years ago, so I'm pretty invested Edit: I forgot I use VyprVPN because of it's verified no-log, does anyone else know of a better service with verified history of denying log access / having active subpoena dead man's switch notices?

ExpressVPN but they sold out to shady folks a few years ago.

windscribe/wireguard not detected

Pretty neat. Doesnt pick up Proton, which I guess is good.

By the way, the author has a small forum with lots of updates on developments (and bugs) in large scale DPI systems.

https://ntc.party

What governments use today for censorship and spying will tomorrow be a one-click solution for small businesses and script kiddies.

Kaspersky is flagging this website as

HEUR:Exploit.Script.Generic;Trojan;High;Heuristic Analysis;http://witch.valdikss.org.ru; Expert analysis

Pls be careful.

"Heuristic Analysis" kinda says it all. Antivirus like Kaspersky likes to block websites for whatever reason they like.

That's because of this tag:

<img src="file://witch.valdikss.org.ru/a" width=0 height=0>

This is a part of the attempt that the site does to retrieve the NTLM hash of your Windows account password. See https://hackerone.com/reports/1054382 for more details.

Surfshark wireguard not detected.

Maybe it was doileak.com? It’s now at https://www.top10vpn.com/tools/do-i-leak/