Glossary
The terms you'll see in our diagnostic output, explained in plain English.
WebRTC Leak
A browser privacy failure where WebRTC reveals your real IP even when a proxy is active.
DNS Leak
When DNS queries escape your proxy tunnel, exposing which sites you visit to your ISP.
ASN (Autonomous System Number)
A unique identifier for a network operator โ used to detect datacenter vs residential IPs.
Datacenter IP
An IP address allocated to a cloud or hosting provider, identified by its ASN.
Residential IP
An IP address allocated to a home internet subscriber, high-trust but slower and more expensive.
Mobile IP
An IP address assigned to a mobile carrier, rotating across millions of subscribers.
Smart Routing
A proxy configuration that decides per-domain whether to go direct or through the proxy.
ICE Candidate
An IP address the browser offers for a WebRTC peer connection, before encryption.
cdn-cgi/trace
Cloudflare's diagnostic endpoint, used by IPCombo to get per-target real exit IPs.
DNS over HTTPS (DoH)
DNS queries wrapped inside HTTPS on port 443, hiding which domains you visit from the network.
DNS over TLS (DoT)
DNS queries encrypted with TLS on a dedicated port 853 โ the predecessor of DoH.
QUIC (Quick UDP Internet Connections)
A UDP-based transport that fuses encryption and multiplexing, the foundation of HTTP/3.
TLS Fingerprint (JA3 / JA4)
A hash of the TLS ClientHello that uniquely identifies the client library โ used to flag proxy traffic.
Encrypted Client Hello (ECH)
A TLS 1.3 extension that encrypts the SNI so network observers can't see which site you visit.
SNI (Server Name Indication)
A plaintext field in the TLS handshake that tells the server which site you want, used by censors to filter traffic.
ASN Reputation
The trust score assigned to a whole network block, the basis of nearly all IP-based access decisions.