http://ping.playit.gg/ embeds the request epoch in the TCP sequence number to give you your ping.
Client SYN =>
<= Server SYN+ACK \w epoch in sequence
Client ACK =>
<= HTTP payload calculating ping with NOW - ACK number