Analyze your connection the way anti-bot systems do — IP, TLS/JA3 fingerprint, WebRTC and DNS leaks, HTTP headers and a clear risk verdict, in one click.
…
Analyzing your connection…0%
What is a connection checker?
A connection checker inspects everything your browser reveals when it connects to a website — your public IP and location, your TLS/JA3 handshake fingerprint, the data WebRTC and DNS can leak, your HTTP headers and the network protocol you negotiate. It then combines those signals into a single risk verdict, the same way anti-bot systems like Cloudflare, Akamai and DataDome decide whether a visitor looks genuine. Use it to confirm that your proxy, VPN or anti-detect setup is actually hiding what you think it hides.
What this tool checks
IP & location
Your public IPv4/IPv6 address, city, country, ISP and ASN, plus security flags that reveal proxy, VPN, hosting or Tor usage.
TLS / JA3 fingerprint
The JA3 hash and cipher suites from your real TLS handshake — a fingerprint anti-bot systems use to tell browsers from automation.
Browser fingerprint
User-Agent, UA Client Hints, languages, screen, WebGL/canvas, timezone and automation tells such as navigator.webdriver.
WebRTC & DNS leaks
WebRTC ICE candidates that can expose your real IP behind a proxy, and the DNS resolvers your connection actually uses.
HTTP & protocol
Your request header order, proxy headers, and whether you negotiate HTTP/2 or HTTP/3 (QUIC) with the edge.
Latency
Round-trip time to our server — median, p95 and jitter — measured over multiple samples.
How to read your risk verdict
The verdict rolls every detected anomaly into one risk level — CLEAN, LOW, MEDIUM or HIGH — and lists each issue with a severity, category and explanation. HIGH means a strong signal that you look automated, proxied or inconsistent: navigator.webdriver being true, a WebRTC IP that leaks a different address than your public IP, a Tor exit node, or a timezone that doesn't match your IP's country. LOW and MEDIUM flag softer inconsistencies. A clean result means the signals we can see line up.
How to fix leaks and lower your risk
If WebRTC exposes a different IP than your connection, disable WebRTC or use a browser or extension that prevents the leak. If your DNS resolvers belong to your real ISP while your IP is elsewhere, route DNS through your proxy or VPN. If your timezone or language doesn't match your IP's location, align them in your browser or anti-detect profile. Quality residential or mobile proxies avoid most datacenter and proxy flags in the first place.
It runs a series of browser-side and server-side probes — IP and geolocation, TLS/JA3 fingerprint, browser fingerprint, WebRTC and DNS leak tests, HTTP and protocol detection — and combines them into a single risk verdict so you can see exactly what your connection reveals.
Yes. The Connection Checker is completely free and requires no signup. Just open the page and it analyzes your connection automatically.
JA3 is a hash of the parameters in your TLS handshake — cipher suites, extensions and curves. Because real browsers and automation tools produce different handshakes, anti-bot systems use JA3 to tell them apart. We capture yours client-side from your real TLS connection.
WebRTC can gather your IP addresses directly from your network interfaces and STUN servers, sometimes revealing your real public IP even when you use a proxy or VPN. If the WebRTC IP differs from your public IP, that's a leak worth fixing.
Yes. We check your IP against a security database that flags proxy, VPN, private relay, datacenter and Tor-exit ranges, and surface those as anomalies in the verdict.
Deep TCP/IP and packet fingerprints require a server with raw-socket access to inspect the network packets between you and it. Our serverless platform can't capture those, so the tool focuses on the signals it can read accurately rather than guessing.
No. The analysis runs in your browser and against stateless endpoints; results are shown only to you and are not saved. Use Download or Copy to keep a JSON snapshot if you want one.
The IP Checker focuses on your IP, location and basic anonymity. The Connection Checker goes deeper: TLS/JA3 fingerprint, header-order analysis, WebRTC candidate inspection, protocol detection and a categorized risk verdict.