A session-scoped, memory-safe web proxy engineered for private research and threat inspection. Every origin is rewritten through HMAC-signed tokens with pre-connect SSRF verification and per-session cookie and storage jars that are wiped when the session ends.
Every request through mozprox.io is validated at the socket layer, cryptographically signed per session, and rewritten in a single streaming pass.
Custom socket-level net.Dialer.Control inspection verifies resolved IPs prior to TCP handshake, blocking RFC1918, loopback, link-local, and cloud metadata targets alongside DNS-rebinding attacks.
Target URLs are sealed inside Base64URL tokens bound to your session key with truncated 128-bit HMAC-SHA256 signatures. Streaming HTML, CSS, and client runtime hooks rewrite navigation without exposing cleartext origins.
Upstream Set-Cookie headers and origin DOM storage are held in per-session in-memory jars that never persist to your browser disk and are wiped when the session ends or Burn Session is triggered.