About the project
What a website can learn. What a visit can lead to.
What Is My Web Info exists to answer a question most people never think to ask: what does your browser actually give away, and what happens when someone tries to use that against you?
Start with the diagnostic. It shows you exactly what an ordinary website can learn the moment you visit — then explains what each signal actually means, instead of just throwing numbers at you. From there, our awareness guides pick up where the diagnostic leaves off, walking through the moments people actually run into: a sign-in that showed up out of nowhere, a document someone supposedly shared with you, a verification screen, an instruction to paste something into a terminal.
Behind that guidance is our own research — we dig into real phishing pages, malware, scripts, and the infrastructure running underneath them, then turn what we find into something a reader can actually use. Not just "here's what we found," but "here's what to watch for because of it."
New case studies go up as investigations wrap and we've stripped out anything sensitive — no fixed schedule, just work published as it's ready.
Four ways into the subject
Check your own browser and connection right now. Learn how those signals actually work. Read Awareness for the decisions a lure is engineered to get you to make. Dig into Research for the infrastructure and behavior underneath it all.
How we research, and how we write about it
Our investigations start with the artifact itself — static inspection, controlled dynamic analysis, pulling configuration back out, mapping infrastructure, whatever the material actually calls for. When we report a finding, we say what evidence supports it. When something requires a judgment call to connect the dots, we say that too.
Before anything gets published, victim identities, personal information, and anything specific to an affected organization come out. Malicious indicators get defanged. Screenshots get sanitized. What we keep is exactly what a reader needs to recognize, investigate, or detect the same pattern themselves — nothing more.
The Awareness articles draw on cited research and official technical documentation, not on speculation. Every third-party campaign screenshot is captioned as exactly that — third-party — and kept clearly separate from our own diagrams and reconstructions. When we're pulling examples from more than one campaign, we say so, rather than blending them into one composite story.
Every article carries its publication date. If we correct something substantial, we explain what changed and update that date — we don't quietly edit around a mistake. Found an error, a dead link, or have a research question? The contact page reaches us directly — including the article URL and the specific passage helps us fix it faster.
How the diagnostic actually works
Some of what you see comes straight from your own browser — device and display values it hands over locally, no server involved. Other parts require a network request: your connection address and a rough sense of location come from that. We run separate tests for IPv4 and IPv6, compare your browser against public vendor release feeds to check the major version, and let your browser's own update screen confirm the actual patch level.
Some of these signals are inherently fuzzy, and we don't pretend otherwise. IP-based location is an approximation, not a pin on a map. Browser identification can be deliberately reduced or masked by privacy tools. And if a network test comes back empty, there's more than one possible reason why. The Privacy page goes through exactly who's involved in measuring all this, and what choices you have over it.
How this stays funded — and honest
Every tool and every article here is free, no account required. We're not running ads yet — we'd rather get the consent setup right first than rush it live and fix it later, so that code is built but paused for now. What we write is driven by the evidence and by what's actually useful to a reader, not by what a sponsor would prefer it say.
Contact: hello@whatismywebinfo.com