The tool only detects a subset of paid Cloudflare users - specifically those with the default ECH settings. If your site shows as undetermined, it likely means you're on a free plan or a paid plan with ECH enabled.
From what I've observed:
- Free plans: ECH is forcefully enabled (sni=encrypted)
- Paid plans: ECH is disabled by default (sni=plaintext), but can be manually enabled
The tool can only definitively distinguish between free plans and paid plans that use the default ECH settings.
There are occasional false positives, but querying different Cloudflare data centers usually resolves this. I've found that switching VPN servers (which routes through different CF edge locations) eventually gives the correct result.
Thanks for your response. I ran a test but I'm not sure if it's working as expected. I performed a Google search on my mobile device for "inurl:amp.cnn.com." However, when I clicked on a result, the page I saw did not appear to use AMP--it redirected me to edition.cnn.com instead.
From what I've observed:
- Free plans: ECH is forcefully enabled (sni=encrypted)
- Paid plans: ECH is disabled by default (sni=plaintext), but can be manually enabled
The tool can only definitively distinguish between free plans and paid plans that use the default ECH settings.