News for hackers. Stuff that matters.
Re:Show HN: Detect paid Cloudflare plans on any website via ECH by phillipseamore on Sunday September 14, 2025 @11:12AM (#45240375)
Seems like this might a wrong assumption (or CF changed something). Just tested one of my own sites that's on the free plan and it has "sni=plaintext".
Re:Show HN: Detect paid Cloudflare plans on any website via ECH by rapawel on Sunday September 14, 2025 @11:29AM (#45240535)
There are occasional false positives, but querying different Cloudflare data centers usually resolves this. I've found that switching VPN servers (which routes through different CF edge locations) eventually gives the correct result.