News for hackers. Stuff that matters.
Re:Show HN: Detect paid Cloudflare plans on any website via ECH by rapawel on Sunday September 14, 2025 @11:38AM (#45240609)
The tool only detects a subset of paid Cloudflare users - specifically those with the default ECH settings. If your site shows as undetermined, it likely means you're on a free plan or a paid plan with ECH enabled.

From what I've observed:

- Free plans: ECH is forcefully enabled (sni=encrypted)

- Paid plans: ECH is disabled by default (sni=plaintext), but can be manually enabled

The tool can only definitively distinguish between free plans and paid plans that use the default ECH settings.

There are no comments on this comment yet.