Network & Runtime Environment Glossary
Map technical networking and browser terms to what they actually mean in diagnostics.
- Public IP
- The routable network address observed by a remote server during a connection. It may belong to a proxy, carrier NAT, or shared gateway rather than uniquely identifying your device.
- IPv4 / IPv6
- Two distinct IP address families whose routing and reachability must be tested separately. Having different IPv4 and IPv6 addresses is normal and not in itself a leak.
- ASN
- Autonomous System Number, identifying a network routing administrative domain (such as an ISP or cloud provider) rather than an individual user.
- BGP Prefix
- An IP address block announced in Border Gateway Protocol routing tables. Route visibility in RIS does not guarantee end-to-end service reachability.
- RPKI / ROA
- Resource Public Key Infrastructure / Route Origin Authorization, used to verify whether an ASN is authorized to originate a BGP prefix.
- PTR
- Pointer record mapping an IP address to a reverse hostname. It is a server-side reverse lookup, not a browser DNS leak test.
- DNSBL
- DNS-based Blocklist tracking spam or abuse sources. Only explicit per-list responses should be interpreted; unlisted does not mean globally clean.
- WebRTC / STUN
- Browser real-time communication and ICE/STUN candidate discovery protocol. Absence of candidates does not prove no other network paths exist.
- Trace Probe
- An anonymous HTTPS request to a fixed edge endpoint (/cdn-cgi/trace) returning the exit IP and edge colo seen for that specific request.
- Domain Split Routing
- Routing traffic through different outbound proxies or interfaces based on target domain rules. Actual behavior must be verified per protocol and app.
- Cookie / Session
- Browser site storage and session mechanisms. Observing cookie names or flags does not validate token values or prove an active login.
- Same-Origin Policy
- Browser security boundary preventing one origin from reading responses from another origin; a CORS block is not the same as a network outage.
- Canvas / WebGL
- Browser 2D/3D graphics rendering APIs used to inspect hardware renderer strings and rendering hashes locally.
- Associated CVEs
- Common Vulnerabilities and Exposures linked to passive service banners by Shodan; does not prove active exploitability or local device compromise.
- HTTP 403 / 429
- HTTP 403 Forbidden and 429 Too Many Requests status codes; always interpret alongside the response body and target service context.
- Unconfirmed
- Indicates missing data, failed requests, rate limits, ungranted permissions, or out-of-scope checks. Never treated as "clean" or "safe".