whoami
whoami
// you haven't typed a thing.
You arrived a few seconds ago and told us nothing about yourself. Yet your connection already handed over the details below. This is the raw material of a social-engineering attack: an attacker collects exactly this before they ever contact you, then uses it to build a message that feels personal and safe.
WHY THIS MATTERS
None of this required a hack. The browser offers it, the network reveals it, a public lookup fills in the rest. No permission box, no warning. Your exact graphics card, how much memory you have, and a fingerprint that can recognise this browser on its next visit with no cookie at all, all readable by any page you open. An attacker pairs your city, your employer's network, and your device into a pretext: a "delivery problem" in your town, an "IT notice" for your exact browser, a "colleague" who knows where you are. The familiarity is the whole game. The defense is to treat unsolicited messages that feel personal as more suspicious, not less.
Privacy: nothing on this page is stored, logged, or sent to us. Everything is computed in your own browser. The network, location, and reverse-DNS lines use public lookups your browser calls directly; we never see them. Reload and it is gone. Practicing what we preach.