Connection test

What this server, like any website, learned from the request your device just sent: its address, the encryption it negotiated, the headers it sent and the fingerprints a site can recognise it by. Open the page on a device behind your GADNET router to see what the internet sees of your network.

Further down there is an optional browser test: a script that reads this device the way tracking scripts do. It starts only when you press its button, and what it reads stays in your browser.

Summary

Element	Value	Rating	What it means
Protocol	TLS 1.3	OK	The current protocol version. The handshake also encrypts the server certificate.
Cipher	AES-256-GCM	OK	Authenticated encryption with a one-time session key (forward secrecy): a key stolen later does not decrypt this connection.
Key exchange	X25519	Note	Classical. Secure today, but traffic recorded now could be decrypted by a future quantum computer. Current Chrome, Edge and Firefox offer post-quantum key exchange.
Proxy	None	Info	The request arrived without `Via` or `Forwarded`. That does not rule a proxy out: one that inspects HTTPS usually adds neither, and then the encryption details below describe its connection, not your browser's.
GADNET network	Not seen	Info	No GADNET router contacted this server from this address within the last 24 h, or this server restarted since and forgot it.
IP version	IPv4	Info	This connection used IPv4. It does not show whether your network has IPv6: a browser falls back to IPv4 whenever the site or the network offers no IPv6 route.

Your address

Element	Value	What it means
Public address	`216.73.216.231` · IPv4	Every website sees this address. Behind a router it is the router's, not your device's, and your provider can link it to your subscription.
Kind	Public internet address	Whether the address belongs to the public internet.
Reverse DNS name	None published	The name your provider published for the address. It often reveals the provider and sometimes the town.
GADNET router at this address	Not seen	Not within the last 24 h: this network has no GADNET router, the router uses another address (for example IPv6), it has not checked for updates yet, or this server restarted since and forgot it.

Encryption

Element	Value	What it means
Protocol	`TLSv1.3`	The version of the encryption protocol. 1.3 is current.
Cipher	AES-256-GCM · 256-bit key `TLS_AES_256_GCM_SHA384`	Encrypts and authenticates the data itself.
Key exchange	X25519 classical	How your browser and this server agreed on the session key.
Groups your browser offered	`X25519` `P-256 (secp256r1)` `P-384 (secp384r1)`	Key exchanges your browser can do, in its order of preference.
Forward secrecy	Yes	A key stolen later does not decrypt this connection.
Application protocol	HTTP/2 · `HTTP/2.0`	The protocol inside the encrypted channel.
Server name (SNI)	`updates.gadnet.pl`	Sent unencrypted in the handshake: your provider sees this name.
Session resumed	No - full handshake	A resumed session skips part of the handshake.
Client certificate	None	Only GADNET routers present a device certificate here; browsers have none to give.
Server certificate	Accepted	Your browser showed this page without a warning, so it accepted the certificate for updates.gadnet.pl.
Offered cipher suites (10)	`TLS_AES_256_GCM_SHA384` `TLS_AES_128_GCM_SHA256` `TLS_CHACHA20_POLY1305_SHA256` `ECDHE-ECDSA-AES256-GCM-SHA384` `ECDHE-ECDSA-AES128-GCM-SHA256` `ECDHE-ECDSA-CHACHA20-POLY1305` `ECDHE-RSA-AES256-GCM-SHA384` `ECDHE-RSA-AES128-GCM-SHA256` `ECDHE-RSA-CHACHA20-POLY1305` `TLS_EMPTY_RENEGOTIATION_INFO_SCSV`	Everything your browser offered, in order. Part of the TLS fingerprint.

Fingerprint

Without cookies or scripts a website can still recognise a browser by what every connection carries. These are the values this server computed from this one request.

Element	Value	What it means
Browser and system (User-Agent)	Not known	Read from the User-Agent header that every request carries.
TLS fingerprint	`061293778c4e57b31a5ff8f8`	Hash of the cipher suites and groups your browser offered, GREASE removed. Simpler than JA3/JA4; shared by everyone on the same browser build.
Header fingerprint	`ad4c99b0917f1bff569d93e6`	Adds User-Agent, Accept, language, encoding and Client Hints. Your address is left out: it changes with the network.

Without a script the server cannot read your screen size, fonts, time zone, graphics card or how the device renders an image. A site that runs scripts can, and that makes a fingerprint far more unique than what is shown here - the browser test below shows how much.

Full browser fingerprint

Result

Full fingerprint (browser + connection)
Browser fingerprint alone
Comparison

Element	Value	Hash	Change
Screen and display
Screen (full, available, colour depth)
Pixel density
Display preferences
System and hardware
Platform
Client Hints (detailed)
Processor threads
Memory (rounded)
Touch points
Graphics card (WebGL)
Language and time
Languages
Time zone
Number and date format
Rendering
Canvas drawing
Installed fonts (found / checked)
Audio processing
Floating-point maths
Features and settings
Available features
From the connection (server)
TLS fingerprint
Header fingerprint

Each part is shown with its value and a short hash. A part that is the same on most devices - a common screen size - says little on its own; together the parts narrow a device down, which is why tracking scripts collect all of them. Canvas drawing and floating-point maths are shown only as hashes: the values are an image and a list of numbers, and their tiny differences between devices are exactly what identifies them.

What GADNET changes here: very little, and that is the point of the test. This fingerprint belongs to the device and the browser, not to the network: the router hides your device's local address and MAC, but a script reads the device itself. The router can still block known tracking domains through DNS filtering, if such a list is switched on.

Headers your browser sent

Every header of this request, in the order received. The front end of this server replaces Host, X-Forwarded-For and similar headers, so those are not listed.

Header: value
`accept: /`
`user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)`
`accept-encoding: gzip, br, zstd, deflate`

Cookies and credentials are listed by name only. This site sets no cookies.

Who sees what

What each party on the way learns when a device behind a GADNET router opens this page. Read across a row.

Sees the information reaches them
Partly only part of it - the i icon says which
Does not see hidden from them or encrypted

Information	This website	Internet provider	GADNET router
Your public address	Sees	Sees	Sees its own address
Your device's local address and MAC	Does not see	Does not see	Sees
Other devices on your network	Does not see	Does not see	Sees
Name of the site you open (SNI)	Sees	Sees sent unencrypted	Sees
Names your device looks up (DNS)	Partly only its own name	Does not see the router uses DNS over TLS	Sees
Address of the page (URL path)	Sees	Does not see encrypted by HTTPS	Does not see
Page content, forms, passwords	Sees	Does not see	Does not see the router does not decrypt HTTPS
Headers and cookies	Sees	Does not see	Does not see
When and how much data flows	Partly only traffic to itself	Sees	Sees
Your browser's TLS fingerprint	Sees	Sees the handshake is not encrypted	Sees
Screen, fonts, graphics card	Partly only through a script, like the test above	Does not see	Does not see

Any other website is in the same position as this one.

A connection from a GADNET network

Topic	What it means
One address for the household	Every device behind a GADNET router leaves by the router's public address (NAT). Websites never see a device's local address or MAC.
IPv4 only to the internet	GADNET zones forward no IPv6 to the internet. A connection over IPv6 usually means another way out - mobile data, a VPN or another network.
Encrypted DNS upstream	The router answers DNS itself and by default forwards it upstream over DNS over TLS, so your provider does not read the names you look up.
The site name stays visible	The server name travels unencrypted in the TLS handshake (SNI); your provider also sees the address and the volume of traffic. Neither GADNET nor this site uses Encrypted Client Hello.
Encryption end to end	The router does not decrypt HTTPS. Its filtering and statistics work from names and traffic volume.
GADNET Browser	Pages pass the router's gateway, but TLS still runs end to end and sites still see the router's address. It adds no marker to the User-Agent, so it looks like Chrome here.
Filtering allowed this page	If this device is behind a GADNET router, the page loading means the router's DNS filtering and internet access rules allow this site for it.

This page stores nothing about you. The server keeps its usual access log line for the request, with the address shortened to /24 (IPv4) or /48 (IPv6).