How the checks work
How IPClear detects your IP, location, IP type, risk score and WebRTC leaks, and what its limits are.
Your IP and location
Our server reads the address your request came from, then looks up its public network record: country, city, time zone, ASN and ISP. The IPv4 and IPv6 rows come from IPv4-only and IPv6-only echo hosts, so you can see which address families your connection uses. Location is approximate and based on the IP only.
The risk score
The score runs from 0 to 100 and is the capped sum of the factors below. Under 25 is low, 25 to 59 is medium and 60 or more is high. It estimates how likely anti-fraud systems are to challenge or block the IP. It says nothing about whether you did anything wrong.
| Factor | Points | When it applies |
|---|---|---|
| Tor exit node | +70 | The IP is in the Tor Project's public exit list. |
| VPN | +40 | A provider flag, or the network is known for VPN hosting, or its name mentions VPN/proxy. |
| Proxy | +40 | A provider flag for open or anonymous proxies (needs a commercial data source). |
| Data center / hosting | +30 | The network belongs to a major cloud or hosting company, or reverse DNS looks like a server. |
| Privacy relay | +10 | Apple iCloud Private Relay and similar services (needs a commercial data source). |
| Provider fraud score | +60 max | Only when a commercial provider such as IPQualityScore is configured; scaled from its 0-100 score. |
IP type and its limits
The free default setup classifies the connection from open signals: the network's ASN and name, reverse DNS and the Tor exit list. It reliably recognises large cloud providers and Tor, and many mobile carriers. It cannot distinguish home from business broadband, and it will miss residential proxies and small VPN providers. Each result shows a confidence level. Connecting a commercial provider improves accuracy a lot.
WebRTC leak test
Your browser asks public STUN servers which address they see, the same way a video call would. If that public address is different from the IP this website sees (for example your real ISP address while a VPN is on), it is flagged as a leak. Local network addresses are normally hidden by your browser behind random ".local" names, which is the safe default.
DNS leak test
Your browser looks up several unique random names under dns.ipclearcheck.com. Our own authoritative DNS server for that zone records which resolver IPs asked, and we look up each resolver's network and country. If your visible IP is a VPN or proxy but the resolvers belong to another, non-public network (usually your ISP), the test flags a likely DNS leak. Test names and resolver IPs are deleted after 10 minutes.