Despite this tool, I ve found a new way to tell where the user has been AND also if they are ^logged-in ̄. People are frequently and persistently logged-in to popular websites. Knowing which websites can also be extremely helpful to improving the success rate of CSRF or Exponential XSS attacks as well as other nefarious information gathering activities.