VPN & Proxy Leak Detector

Free 4-layer VPN leak test: WebRTC, DNS, proxy headers and timezone checks. Verify your anonymity in seconds — no signup required.

You are using a VPN
VPN and Proxy Leak Detector
Click the button below to run a full security scan

Multi-Layered VPN and Proxy Leak Analysis

True anonymity requires passing multiple independent tests at the same time. Our detector runs four parallel checks that together paint a complete picture of your connection's privacy level.

WebRTC Leak Detection

Using the browser's native RTCPeerConnection API, ICE candidates are gathered from Google STUN servers. Any public IP that appears here indicates your VPN is not blocking WebRTC — a critical leak channel that most VPNs overlook.

IP Reputation Check

By cross-referencing the visitor's ASN/ISP against a curated list of known cloud and hosting providers (AWS, Azure, GCP, DigitalOcean, OVH, Hetzner, etc.), we detect VPN exit nodes, datacenter IPs, residential proxies, and Tor exit nodes in real time. Even if your VPN hides your real IP, the exit-node IP itself is still flagged.

HTTP Header Fingerprinting

Transparent and anonymous proxies inject headers such as X-Forwarded-For, Via, and Proxy-Connection into your HTTP requests. Our server-side scanner detects 14+ proxy header signatures.

Timezone Correlation Attack

Your browser reports its local timezone via the JavaScript Intl API. We compare it against the timezone associated with your IP's geographic location. A mismatch is a strong statistical indicator of location spoofing via VPN.

VPN Leak Detection — FAQ

Quick answers to the most common questions about this tool.

How does this VPN leak detector work?

It runs four parallel checks: WebRTC ICE candidate harvesting, IP/ASN reputation lookup, HTTP proxy-header fingerprinting and a timezone-vs-IP correlation attack. A single failure flags a leak.

What is a WebRTC leak?

WebRTC can expose your real public or local IP through STUN even when a VPN is active, because the protocol bypasses the system proxy. Most major VPNs do not block this by default.

Why is my IP shown as a "datacenter" or "hosting" IP?

Because your VPN exit node lives in a cloud or hosting network (AWS, OVH, Hetzner, etc.). That itself is not bad — it just means the destination site can tell you are using a VPN.

Does this test work behind Tor?

Yes, but Tor exit nodes are flagged separately. WebRTC is disabled in Tor Browser, so that test will report "not supported" — which is the secure outcome.