Child's Death Shows How Measles in the Brain Can Kill Years After an Infection (scientificamerican.com)

A tool that checks if any website uses a paid Cloudflare subscription by examining their public /cdn-cgi/trace endpoint. Cloudflare only allows disabling Encrypted Client Hello (ECH) in paid plans, so sni=plaintext indicates a paid subscription. Works on any Cloudflare-proxied site.

Comments (5)

rapawel · 1h ago

Example website with paid subscription: Substack https://experiments.pawelpokrywka.com/cloudflare-subscriptio...

wordglyph · 35m ago

My site https://wordglyph.xyz came back undetermined

rapawel · 23m ago

The tool only detects a subset of paid Cloudflare users - specifically those with the default ECH settings. If your site shows as undetermined, it likely means you're on a free plan or a paid plan with ECH enabled.

From what I've observed:

- Free plans: ECH is forcefully enabled (sni=encrypted)

- Paid plans: ECH is disabled by default (sni=plaintext), but can be manually enabled

The tool can only definitively distinguish between free plans and paid plans that use the default ECH settings.

phillipseamore · 49m ago

Seems like this might a wrong assumption (or CF changed something). Just tested one of my own sites that's on the free plan and it has "sni=plaintext".

rapawel · 31m ago

There are occasional false positives, but querying different Cloudflare data centers usually resolves this. I've found that switching VPN servers (which routes through different CF edge locations) eventually gives the correct result.

Locked-up merchandise is driving customers away (ktla.com)

Am I the only one who is affected by dark themes? (fastly.com)

PyPI mirror proxy that injects code and bypasses pip hash verification (github.com)

Quill: Asynchronous Low Latency C++ Logging Library (github.com)

MariaDB 11.8's zero-configuration TLS requires no manual setup (optimizedbyotto.com)

Metrics-cpp: High-performance metrics library for C++ (github.com)

Show HN: TNX API – Natural Language Interaction with Databases, Now Open Source (github.com)

A deep dive into Cloudflare's September 12, 2025 dashboard and API outage (blog.cloudflare.com)

Writing an operating system kernel from scratch (popovicu.com)

An Afternoon at the Recursive Café: Two Threads Interleaving (ipfs.io)

Show HN: Didit – Identity Verification Platform (Unlimited Free KYC) (didit.me)

The Computational Foundations of Collective Intelligence (arxiv.org)

WorldCat Editions and Holdings Release (annas-archive.org)

Octopuses use all their arms for different tasks (discoverwildlife.com)

State of the art for reducing executable size with optimized program (discourse.llvm.org)

We're Walling Off the Open Internet to Stop AI (techdirt.com)

World's 1000 Largest Banks Ranked by Assets Under Management (tabinsights.com)

The Spine Model (spinemodel.info)

A Short History of the Business Card (themalin.co)

Delivering Parcels in Beijing (thedial.world)

Child's Death Shows How Measles in the Brain Can Kill Years After an Infection (scientificamerican.com)

Insurance company repeatedly denied medical claim, then AI delivered victory (mercurynews.com)

Fine-grained HTTP filtering for Claude Code (ammar.io)

TX-10k Salvage Ship

Show HN: ForkLaunch framework: Upgrading Express with a fully typed DSL (github.com)

Gemini tops App Store; Grok 4 Fast ships; ChatGPT gets harder to trick (lightcapai.medium.com)

Romania Says Russian Drone Entered Its Airspace (nytimes.com)

Website Is Just an SVG (svg.nicubunu.ro)

Payment System Vendor Took Year+ to Patch Infinite Card Top-Up Hack (securityweek.com)

Get Out of Technology (geohot.github.io)

HybridPetya: More proof that Secure Boot bypasses are not just an urban legend (theregister.com)

Show HN: I Built a Free Site for Students to Test Their Knowledge on Their Notes (pdftoquiz.com)

Show HN: Probably the simplest Reddit-style site you'll ever use (nooki.me)

I'm out, says OpenSUSE: We're dropping bcachefs support from next kernel version (theregister.com)

Is This the End of the Dictionary? (theatlantic.com)

Show HN: TabTabTab – Cursor for Google Sheets (tabtabtab.ai)

Data Act Explained (digital-strategy.ec.europa.eu)

Wallet Voting – Doctorow (pluralistic.net)

Stoop (the newsletter app) is shutting down

Bank of Thailand Freezes 3M Accounts, Sets Daily Transfer Limits (thaienquirer.com)

Show HN: Supakey – let users bring their own Supabase to your app (supakey.app)

Show HN: Train – AI Workout App for Smarter, Adaptive Fitness (play.google.com)

Google co-founder Sergey Brin and ex-wife visited Epstein's `pedophile island' (2024) (nypost.com)

The second wave of MCP: Building for LLMs, not developers (vercel.com)

The Security Challenges of HTTP/3 and QUIC – What You Need to Know (medium.com)

Universal Deep Research: Bring Your Own Model and Strategy (arxiv.org)

Nvidia Discrete GPU Market Share Dominance Expands to 94% (techpowerup.com)

The AI-Scraping Free-for-All Is Coming to an End (nymag.com)

American Museum of Natural History Announces "A Night at the Museum" Sleepover (cbsnews.com)

Things to build with Google's new Nano Banana image editing and generation model (medium.com)

Show HN: Detect paid Cloudflare plans on any website via ECH

Comments (5)