Leak checks

These checks look at what your connection gives away beyond your IP: where your DNS lookups go, whether IPv6 or WebRTC reveal another address, and hints that don't match where your IP says you are. If you use a VPN, these are the ways it can leak.

The DNS check looks up made-up names that only this server's own DNS server answers; it notes which resolver asked, and any part of your address it passed on, and forgets both after a minute. The thorough check makes 32 lookups instead of 8, to catch resolvers that only show up now and then. The WebRTC check asks Cloudflare's public STUN server which address it sees. Locations come from DB-IP's database on this server, and nothing you look up here is stored.

What your browser sends

Encryption

…

HTTP

…

The headers that came with this page request. Cookies and the proxy's own headers are left out.