Note: These security checks help you understand how your connection appears to websites and services. They can reveal potential privacy concerns or confirm that your privacy tools are working correctly.

How Security Analysis Works

👁️ Identifiability

First, the test measures how easily you can be identified and tracked

Privacy Score Browser Fingerprinting IP Blacklist

🔍 Anonymization Tools

Then, it detects what privacy tools you're using

VPN/Proxy Detection Tor Exit Node ISP Privacy Risk

🔓 Leak Tests

Finally, it checks if your protection has any leaks

DNS Leak IPv6 Leak WebRTC Leak

🏢 Commercial Surveillance

It assesses your exposure to data brokers and commercial tracking

Data Broker Exposure Global Privacy Control

Security Indicators Explained

Privacy Score

Your score: Calculating...

Your Privacy Score is a composite metric (0–100%) summarizing how private and anonymous your current connection is. It is calculated from all the security checks on this page.

Factor	Deducted	Max Impact	When deducted
VPN / Proxy	—	−34 pts	No VPN detected
DNS Leak	—	−20 pts	Leak detected
WebRTC Leak	—	−20 pts	Leak detected
IPv6 Leak	—	−15 pts	Leak detected
Browser Fingerprint	—	−15 pts	High tracking risk (−15 pts) / Moderate tracking risk (−7 pts)
IP Blacklist	—	−10 pts	Blacklisted (−10 pts) / Low threat (−5 pts)

The table below lists all possible score ranges and what they mean for your privacy.

Score Range	What It Means
Good (67–100%)	Your connection is well protected.
Moderate (34–66%)	Some risks detected — consider using a VPN or fixing leaks.
Poor (0–33%)	Significant privacy risks. Your real identity and location may be exposed.

Note: This score reflects your current connection only. Using a VPN, fixing browser leaks, and reducing fingerprint uniqueness will all improve your score.

↑ Back to Your Data

Browser Fingerprinting

Your status: Checking...

Browser fingerprinting collects information about your browser and device to create a unique identifier. This can be used to track you across websites even without cookies.

The table below lists all possible statuses you may see for this indicator.

Status	What It Means
Common (67–100%)	Your browser configuration is shared by many users — harder to track.
Moderate tracking risk (34–66%)	Your configuration is less common — you may be trackable.
High tracking risk (0–33%)	Your browser is highly identifiable — easy to track across sites.

For a detailed breakdown of all fingerprint components and how to reduce your uniqueness, run the full browser fingerprint test.

↑ Back to Your Data

IP Blacklist Status

IPv4

Checking...

IPv6

Checking...

Checks if your IP address appears in the AbuseIPDB database — a community-driven platform tracking IPs involved in hacking, spam, DDoS attacks, and other malicious activity.

The table below lists all possible statuses you may see for this indicator.

Status	What It Means
No threats detected (76–100%)	No abuse reports found, or only a handful of low-confidence ones — statistical noise, not a real signal. Your IP has a clean reputation.
Low threat (26–75%)	Some reports exist. This may affect access to certain services.
Blacklisted (0–25%)	Heavily reported IP. Likely blocked by firewalls and security systems.

What it means: A "No threats detected" status is normal for most users. If your IP is blacklisted, it could be because:

A previous user of this IP (IPs are often recycled) engaged in spam/abuse
You're using a VPN — exit nodes are frequently reported because many users share the same IP
Your computer might be infected with malware sending spam

For a full report including abuse confidence score and detailed statistics, visit the IP Blacklist Checker.

↑ Back to Your Data

VPN/Proxy Detection

Your status: Checking...

This check determines whether your IP address appears to be coming from a VPN (Virtual Private Network) or proxy server rather than a regular residential or business connection.

The table below lists all possible statuses you may see for this indicator.

Status	What It Means
Not detected	Your connection appears to be a regular ISP connection.
Detected	Your IP is associated with a known VPN provider, proxy service, or datacenter hosting.

What it means: If you're using a VPN but it shows "Not detected," your VPN is effectively masking its identity. If it shows "Detected" when you're not using a VPN, your ISP might route traffic through infrastructure that resembles VPN/datacenter IPs.

↑ Back to Your Data

Tor Exit Node

Your status: Checking...

Checks if your IP address is a known Tor network exit node. Tor is a privacy network that routes your traffic through multiple servers to anonymize your connection.

The table below lists all possible statuses you may see for this indicator.

Status	What It Means
No	Your connection is not coming from the Tor network.
Yes	Your traffic is exiting through the Tor network.

What it means: If you're using Tor Browser, this should show "Yes." Many websites restrict or block Tor exit nodes due to abuse concerns. If you're not using Tor but this shows "Yes," something unusual is happening with your connection.

↑ Back to Your Data

ISP Privacy Risk

Your risk level: Checking...

Your ISP (Internet Service Provider) can see your internet activity unless you use a VPN, Tor, or encrypted DNS. In the United States, ISPs have been legally permitted to collect and sell your browsing history since Congress repealed FCC privacy protections in 2017. Major carriers — Comcast, AT&T, Verizon, T-Mobile — have all been documented monetizing user data.

The table below lists all possible risk levels for this indicator.

Risk Level	What It Means
Low risk	VPN or Tor detected — your ISP sees only encrypted traffic and cannot read your browsing activity.
Medium risk	No VPN detected. Your ISP can see your connection metadata, but HTTPS encrypts page content.
High risk	No VPN and a DNS leak detected. Your ISP can see both your traffic metadata and every domain you look up.

What your ISP can see without a VPN:

Every domain name you visit (via DNS queries)
Connection timestamps and duration
Unencrypted HTTP traffic in full
Your device's MAC address and hardware identifiers

How to reduce your risk:

Use a reputable VPN to encrypt all traffic before it leaves your device — compare VPNs
Enable DNS over HTTPS (DoH) in your browser or router to hide DNS queries
Use Tor Browser for sensitive browsing sessions

↑ Back to Your Data

DNS Leak

Your status: Checking...

DNS (Domain Name System) translates website names like "google.com" into IP addresses. When using a VPN, your DNS requests should also go through the VPN tunnel.

The table below lists all possible statuses you may see for this indicator, ordered from best to worst protection.

Status	What It Means
No leak	Your DNS queries go through your VPN, so your internet provider can't see which sites you visit.
No VPN detected	Standard browsing: your internet provider can see your DNS queries.
Unable to check	DNS data couldn't be retrieved. Check your connection and refresh the page.
Leak detected	Your DNS queries go outside your VPN, so your internet provider or another resolver can see every site you visit.

What it means: Even with a VPN, if DNS leaks, your ISP can see which websites you're visiting. The location shown (e.g., "DNS: CZ") indicates where your DNS resolver is located.

What to do if leak is detected:

Enable "DNS leak protection" in your VPN settings
Use a VPN with built-in DNS servers
Manually configure secure DNS (Cloudflare 1.1.1.1, Google 8.8.8.8)

↑ Back to Your Data

IPv6 Leak

Your status: Checking...

Many VPNs only protect IPv4 traffic. If your network supports IPv6, traffic might bypass the VPN tunnel entirely, exposing your real location. Leaks are detected by comparing the geo-location of your IPv4 and IPv6 addresses. The IPv6 Test shows your IPv6 address, its provider and the leak result on one page.

The table below lists all possible statuses you may see for this indicator, ordered from best to worst protection.

Status	What It Means
No leak	Your IPv6 address belongs to your VPN/Tor network, not to your internet provider.
No leak (no IPv6)	VPN/Tor is on and your connection has no IPv6 address, so nothing can leak over IPv6.
No IPv6	No VPN, and your network doesn't support IPv6 — no leak possible.
No VPN detected	You're not using a VPN — IPv6 visibility is normal.
IPv6 visible	IPv6 is visible, but the lookup service couldn't confirm who owns the address.
Unable to verify	Your VPN status couldn't be checked, so the IPv6 result can't be evaluated.
Leak detected	Your IPv6 address belongs to your internet provider, not your VPN — your real address is exposed.

What it means: If you see "Leak detected", your VPN is protecting IPv4 but not IPv6. Websites can see your real IPv6 address and determine your true location.

What to do if leak is detected:

Enable IPv6 leak protection in your VPN settings
Disable IPv6 on your device/router while using VPN
Use a VPN that fully supports IPv6 tunneling

↑ Back to Your Data

WebRTC Leak

Your status: Checking...

WebRTC (Web Real-Time Communication) is a browser technology used for video calls and file sharing. It can sometimes reveal your real IP address even when using a VPN.

The table below lists all possible statuses you may see for this indicator, ordered from best to worst protection.

Status	What It Means
No leak (WebRTC disabled)	WebRTC is disabled — maximum privacy.
No leak (VPN protected)	VPN protected — no IP leaks detected. WebRTC is properly restricted.
No leak (protected)	Secure — no public IP addresses exposed via WebRTC.
No leak (VPN working)	Protected — WebRTC is only showing your VPN IP. Your real identity remains hidden.
No leak	WebRTC shows the same IP as your public IP — no additional IPs are exposed.
No VPN detected	No VPN detected — WebRTC is showing your public IP. Standard browsing mode.
Leak detected	WebRTC is exposing your real IP address. Your location and privacy are at risk.

What to do if leak is detected:

Disable WebRTC in your browser (extensions are available for this)
Use a VPN that includes WebRTC leak protection
Use a browser with built-in WebRTC blocking (like Tor Browser or Brave with Tor)

↑ Back to Your Data

Data Broker Exposure

Your risk level: Checking...

Data brokers are companies that collect, aggregate, and sell personal information — including your IP address, browsing behavior, location history, and ISP data. The US has the largest data broker industry in the world, with no federal law restricting their activities.

The table below lists all possible risk levels for this indicator.

Risk Level	What It Means
Low risk	VPN or Tor active, or you are outside the US — your ISP cannot easily sell your data to brokers.
Medium risk	US connection without VPN. Your IP and browsing metadata may be accessible to data brokers.
High risk	US connection with a major ISP known to monetize user data (Comcast, AT&T, Verizon, etc.). Your browsing history may be actively sold.

How to reduce your exposure:

Use a reputable VPN — encrypts traffic before it reaches your ISP — compare VPNs
Opt out directly from major brokers (Spokeo, Whitepages, BeenVerified, Acxiom)
Use a browser with strict tracking protection (Firefox, Brave)

Full guide: Data Brokers & How to Protect Yourself
↑ Back to Your Data

Global Privacy Control

Your status: Checking...

Global Privacy Control (GPC) is a browser signal that automatically tells every website you visit "do not sell or share my personal information" — a machine-readable, always-on replacement for the deprecated Do Not Track header. Under California's CPRA and Colorado's CPA, businesses are legally required to honor it as a valid opt-out request.

The table below lists all possible statuses you may see for this indicator.

Status	What It Means
Enabled	Your browser is sending the GPC signal. Sites covered by CPRA/CPA are legally required to treat this as an opt-out of the sale/sharing of your data.
Not sent	Your browser is not sending a GPC signal. Most browsers don't enable it by default — see the Data Broker guide for how to turn it on.

What it means: GPC only carries legal weight in states with a recognized universal opt-out mechanism (currently California and Colorado). Outside those states, sites may still honor it voluntarily, but aren't required to.

↑ Back to Your Data

Why Security Analysis Matters

Privacy Check: If you're using privacy tools (VPN, Tor), these tests help verify they're working correctly. If a test shows unexpected results, your privacy might be compromised.

Assess trackability: Find out how uniquely identifiable your browser is and whether your IP has a bad reputation
Verify VPN effectiveness: Confirm your VPN is properly masking your connection
Detect leaks: Identify if WebRTC, DNS, or IPv6 are exposing your real IP
Check reputation: See if your IP has been associated with abuse (important for email deliverability)
Understand restrictions: Know why certain websites might be blocking or limiting your access

Frequently Asked Questions

What does this IP security test check?

It runs 10 checks on your current connection and combines them into one Privacy Score: how unique your browser fingerprint is, whether your IP is listed on the AbuseIPDB blacklist, whether your IP belongs to a VPN, proxy or Tor exit node, how much your internet provider can see, whether DNS, IPv6 or WebRTC leaks your real IP or browsing, your exposure to data brokers, and whether your browser sends the Global Privacy Control signal. Each result is explained in the Security Indicators section above.

How is the Privacy Score calculated?

It starts at 100% and loses points for each risk found: no VPN detected (−34), a DNS leak (−20), a WebRTC leak (−20), an IPv6 leak (−15), a high or moderate fingerprint tracking risk (−15 or −7), and a blacklisted or low-threat IP (−10 or −5). 67–100% is Good, 34–66% is Moderate and 0–33% is Poor. The score reflects your current connection only, so it changes when you turn a VPN on or off.

Why is my score Moderate even though nothing is leaking?

Without a VPN, the score can't go above 66%, because "No VPN detected" alone costs 34 points. That doesn't mean something is broken. It means your internet provider and every site you visit see your real IP address. If you don't need to hide your IP, a Moderate score with no leaks is normal.

My VPN is connected. Why does the test still find a leak?

"Connected" only means the VPN tunnel is up. DNS lookups can still go to your internet provider's resolver, WebRTC can reveal your real IP to any page that asks for it, and many VPNs tunnel only IPv4, leaving IPv6 traffic outside the tunnel. Turn on DNS and IPv6 leak protection in your VPN app, enable its kill switch, and block or restrict WebRTC in your browser. The guide Is Your VPN Leaking? walks through each fix.

Why does it say "VPN/Proxy Detected" when I'm not using a VPN?

The check looks up your IP in a database of known VPN, proxy and data center addresses. Some internet providers, corporate networks and cloud-hosted connections use IP ranges that look like data center infrastructure, so they get flagged even without a VPN. Websites that use the same kind of database may treat you the same way, for example by showing you extra CAPTCHAs.

Can my internet provider see the websites I visit?

Yes, unless you hide it. HTTPS encrypts the content of the pages you open, but your internet provider still sees which domains you connect to and when, through your DNS lookups and the connections themselves. In the US, providers have been allowed to use and sell this data since Congress repealed the FCC's broadband privacy rules in 2017. A VPN or Tor hides it from your provider. Encrypted DNS (DNS over HTTPS) hides only the lookups.