Your browser contacts these services directly, exposing its exit IP. Reachability does not prove account eligibility. Two observers do not represent every website; an unobserved IP family stays unknown.
Websites and AI reachability
Checking…
Regional exits
Checking…
WebRTC public exits
Checking…
DNS resolver observations
Checking…
Confirm expected routing
Disable the proxy and record a direct exit, enable global proxy and record its exit, then restore rule mode and check again. Baselines stay in this page and expire after 10 minutes.
These are recursive resolver exits observed by an authoritative server, not necessarily your configured DNS address. Geography alone does not prove a leak.
How can I confirm split routing?
Record a direct exit with the proxy disabled, then a proxy exit in global mode. Restore rule mode to compare the regional observations with those baselines. Missing, identical or expired baselines cannot establish success.
Why are some readings unknown?
Missing nodes, timeouts and unobserved address families are not passes. Two observers describe only those destinations, not every application, website or routing rule.
Does an overseas DNS resolver mean there is no leak?
No. An authoritative DNS node sees recursive resolver exits, which may differ from configured DNS addresses. Compare with your intended proxy DNS policy; geography and resolver names alone establish neither leakage nor safety.