Live scan of this browser
Runs entirely in this browser. One request asks our server to echo your IP and headers — it isn’t stored. The STUN test contacts stun.l.google.com and only runs when you press it.
The report
Fixes are tailored to the browser we detected.
Pro
Apply a fix, rescan, and see what changed. Pro saves redacted snapshots — score, grade, browser family and each check’s status and estimated bits. Never your IP, location or raw fingerprint values.
What it is
Every website you open can quietly measure your browser: your IP and rough location, your graphics card, your fonts, your time zone, and — if you use crypto — which wallet extensions you have and sometimes your address. Zentinel runs those same measurements on you, shows the results, scores them, and tells you how to close what can be closed.
What you’re looking at
The orb is your browser’s surface. Each check owns a horizontal band of hexagonal tiles, top to bottom in the order the scan runs.
The check passed: the browser hides it, randomises it, or doesn’t expose it at all.
Readable by sites, but shared by many browsers, so it identifies you only a little.
Readable and distinctive. Tile height grows with the estimated bits of identifying information.
Something you probably didn’t intend: a local IP through WebRTC, a VPN bypass, an address handed over silently. Particles drift off leaking bands.
Shows which band is being measured right now while the scan runs.
The faint outer cage gets denser as your privacy score rises.
How it works
GET /api/echo returns the IP our server saw, a country-level lookup of it (the offline DB-IP Lite table on our own server, or Cloudflare’s edge geolocation when the app runs on Cloudflare), and the headers your browser sent — including client hints the page requested with Accept-CH. Computed per request, never written down.connect({silent}), Phantom onlyIfTrusted, EVM eth_accounts). The STUN test asks Google’s public STUN server which IP WebRTC would use.Bit values are rough, typical estimates — Zentinel keeps no database of visitors, so it can’t measure how rare you are against anyone else. It can’t see your DNS resolver, other tabs, or what your wallet extension sends to its own servers. A great score doesn’t make you anonymous; it means this page found fewer ways to recognise you.
Beyond the page
Every balance your wallet shows comes from an RPC server. It sees your IP next to every address you load, so it can link all your wallets together. Wallets use their own RPC by default; some let you set a custom one. Using your own or a privacy-respecting provider limits who builds that picture.
When you click “Connect” on a dApp, your wallet remembers it. From then on that site can usually read your address on every visit without asking. Review the connected-sites list in your wallet and remove what you don’t use.
Your device asks a DNS resolver for every domain you visit — usually your ISP’s. Encrypted DNS (DNS-over-HTTPS in your browser or OS) hides those lookups from your network, though the resolver itself still sees them.
Pasting your address into a website ties it to your IP and browser on that site’s logs. Do it from a separate profile, or use tools that query from your browser directly.
Built with
Features
The coin
In Zentinel the coin does one thing: you burn some in your own wallet transaction to unlock Pro. The server builds the burn, you sign it, and the server confirms on-chain that the tokens were destroyed before unlocking.
Burning destroys tokens permanently. It gives no return, revenue share or financial right. The free version stays free.
The coin isn’t live yet, so burning is off. The full scan is free today.
Heads-up: signing in connects your wallet to this site, so afterwards the “silent wallet access” test will (correctly) show that Zentinel can read your address.
You are about to burn – tokens.
These tokens are destroyed forever. This is not a payment to us. Pro unlocks for 30 days, stacking.
A burn is waiting to be verified:
Burning destroys tokens permanently. It does not give you any return, revenue share or financial right. The free version of this app stays free.
For a pump.fun coin the initial supply was 1,000,000,000, so this counts every burn of the coin by anyone — including any burns the team makes from creator fees. It is a measurement, not a promise.
Privacy & safety
Report cards contain no free text, only scores and statuses. Every card has a Report button; reported cards can be removed by the site owner. Terms: don’t use Zentinel or its cards for anything illegal.
FAQ
Yes — every number comes from this browser, measured when the page loaded (or when you pressed Rescan).
Because they expose different things. Brave and Firefox randomise or hide several signals; Chrome exposes more device detail and client hints. That difference is the point.
No. They are typical estimates of how much each signal varies between browsers. We don’t keep a database of visitors, so we can’t measure your rarity against others — and we’d rather not.
No. It only uses calls that never prompt and never sign. If a wallet returns an address, it’s shown here (shortened) and never sent to our server.
The scan is free. Pro (saved comparisons, share cards) is unlocked by burning the coin — never by paying us.
Any Solana wallet supporting the Wallet Standard and message signing: Phantom, Solflare, Backpack and others.
Yes. Mobile browsers expose less (no wallet extensions, fewer fonts), so scores differ. For Pro, open Zentinel inside your wallet app’s browser.