Where do these numbers come from?

Each time someone finishes a check here, the page adds one to anonymous counters: how each check came out, and readings like the system, browser and screen. No IP and no record of a single visit are kept, so there are only totals here.

Why do so many people get caught?

Many who test here already use a proxy or VPN and want to see how well they hide. That's why split routing, mismatched clocks and DNS leaks are far more common here than among internet users at large.

How often is it updated?

The page reads the latest numbers each time it opens; the totals are worked out once a minute. "Commonest" lists only values shared by 20 checks or more, so rare values never show up here.

Who takes the test

These numbers come from anonymous counts of every check: how many people took the test, what gives them away most, and which systems, browsers and cards they use.

Check yourself

checks · the last 7 days

What gives people away most

The commonest setups

From anonymous counts: no IP, no record of a single visit. "Commonest" lists only values shared by 20 checks or more.

You're in the in-app browser of , so the results below are that browser's. To test the browser you normally use, copy the link and open it in Safari or Chrome.You're in an app's in-app browser, so the results below are that browser's. To test the browser you normally use, copy the link and open it in Safari or Chrome.You're in WeChat, so the results below are its in-app browser's. To test the browser you normally use, tap ··· at the top right and choose Open in Browser.

86 signals · no permission needed

Who websites think you are

You're probably from xxxx xxxx, and right now you're in xxxx xxxx xxxx xxxx xxxx. You speak xxxx xxxx xxxx xxxx, and your clock is set to xxxx xxxx xxxx xxxx xxxx, in xxxx xxxx format.

You're on xxxx xxxx xxxx xxxx xxxx, using xxxx xxxx xxxx xxxx xxxx, with a xxxx xxxx xxxx xxxx screen and xxxx xxxx xxxx xxxx graphics: xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx.

You get online through xxxx xxxx xxxx, xxxx xxxx xxxx xxxx; the DNS server that looks up sites for you is in xxxx xxxx. xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx.

You prefer xxxx xxxx, and xxxx xxxx xxxx. xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx. Your fonts drop a hint: xxxx xxxx xxxx xxxx xxxx. As for your age, xxxx xxxx xxxx xxxx xxxx.

To a site, this is xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx. xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx. You opened this page xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx, xxxx xxxx, xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx.

In a crowd, xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx.

How sites would label you

Browser fingerprint IDThe same on every site, in private windows and behind a VPN

To tell you how many people share your settings, this site keeps anonymous counts: no IP, no full fingerprint, no record of any single visit. ·

Disguise check

–

Reading…

I care about

Fix these first

Time zone vs IP
- Set the system time zone to match the IP
- Windows: Settings → Time & language
- macOS: System Settings → General → Date & Time
Language vs IP
- Put the IP country's language first in the browser
- Not trying to pass as a local? Leave it
System language vs IP
- The system has another language pack installed, and its fonts and voices show it
- Use a system or virtual machine without those languages
- Or pick a region that matches the system's language
DNS leak
- Clash / Mihomo: DNS with fake-ip, or TUN mode
- V2Ray / Xray: send DNS through the proxy too
- Browser: turn on Secure DNS
Split routing
- To hide it, switch to global mode
- If local sites go direct on purpose, leave it
WebRTC leak
- Proxy client: turn on TUN mode
- Or limit WebRTC in the browser (Chrome: WebRTC Network Limiter)
Round trip
- A proxy always adds this extra leg, and sites can measure it
- A server closer to you, with lower latency, narrows the gap
- Home or mobile exits draw less suspicion than data center IPs
Data center IP
- Use a home or mobile exit instead
- Streaming, AI and payment sites often block data center IPs
User agent vs system
- Don't change only the user agent: the graphics card gives it away
- Need several identities? Use an anti-detect browser
Tampered environment
- Extensions that change the user agent, language or time zone only change what JavaScript reads; the request headers and the functions underneath stay as they were
- To pass for elsewhere, change the system itself: its language and time zone
- With an anti-detect browser, make sure its settings agree with each other
Anti-detect browser traces
- In an anti-detect browser, pick a user agent version that matches its engine
- Don't rewrite only the page's navigator: a Worker must read the same values (a change in the browser's core, not an injected script)
- Pick system, platform and graphics vendor as one set, not mixed
Trackable fingerprint
- Use Brave (it scrambles the fingerprint)
- Or Firefox with resistFingerprinting
- Or Tor Browser
Automation
- Close Selenium, Puppeteer or other automation tools, then reload

Connection

HTTP/3
- Let the proxy carry UDP (Clash / Mihomo: TUN mode, udp: true)
- Allow UDP 443 in the firewall
- Check that QUIC isn't turned off in the browser
ECH
- Turn on Secure DNS (DNS over HTTPS) in the browser
- Proxy: turn off fake-ip, or have its DNS return HTTPS records
- Use a browser that supports ECH: Chrome, Edge, Firefox
Post-quantum
- Update the browser
- Turn off HTTPS scanning in your antivirus, or ask whether the company proxy decrypts traffic
WARP
- Cloudflare WARP: turn it on or off in the 1.1.1.1 app

Where do you want to seem to be?

Target region

Every signal and the value it read

A signal is something a site can read about you without asking. Any site can read all of these, and none of them shows a permission prompt.

What the server sees15

IP address…CF-Connecting-IP

Location…request.cf.city

Coordinates…request.cf.latitude

Network (ASN)…request.cf.asOrganization

DNS resolver…edns.ip-api.com

Time zone of the IP…request.cf.timezone

Reverse DNS…DNS PTR

Nearest data center…request.cf.colo

HTTP and TLS…request.cf.tlsVersion

Key exchange…/cdn-cgi/trace · kex, sni

Cloudflare WARP…/cdn-cgi/trace · warp

TLS fingerprint…TLS ClientHello

Your clock…Date.now()

WebRTC addresses…RTCPeerConnection · STUN

Local address…WebRTC host candidate

Exits6

Site in mainland China…myip.ipip.net

IP service abroad…api.ip.sb

ChatGPT…chatgpt.com/cdn-cgi/trace

Claude…claude.ai/cdn-cgi/trace

Cloudflare…www.cloudflare.com/cdn-cgi/trace

IPv4 and IPv6…Cloudflare Radar · IPv4 / IPv6

Sent with every request (headers)7

User agent…User-Agent

Languages…Accept-Language

Browser brands…Sec-CH-UA

Platform…Sec-CH-UA-Platform

Compression…Accept-Encoding

Do Not Track…DNT · Sec-GPC

Came from…Referer · document.referrer

Language and region8

Browser languages…navigator.languages

Locale…Intl.DateTimeFormat

System time zone…Intl …timeZone

Clock format…Intl …hourCycle

Week starts…Intl.Locale weekInfo

Number and date format…Intl.NumberFormat

Keyboard layout…navigator.keyboard

Speech voices…speechSynthesis

Fingerprints10

JS engine…Error.message

Engine's real version…JS feature probes

Canvas…canvas.toDataURL

WebGL…WebGL getParameter

Audio…OfflineAudioContext

Math fingerprint…Math.* → SHA-256

System emoji version…emoji measureText

Font list…fonts → SHA-256

Combined fingerprint…SHA-256

Fingerprint protection…canvas × 2

Device24

Operating system…userAgentData

Browser…userAgentData.brands

CPU architecture……architecture · bitness

Screen…screen · devicePixelRatio

Refresh rate…requestAnimationFrame

Screens…screen.isExtended · screenX

Window…innerWidth · availHeight

Graphics card…WebGL RENDERER

WebGPU…navigator.gpu adapter.info

WebGL capabilities…WebGL2 · MAX_TEXTURE_SIZE

CPU cores…hardwareConcurrency

Memory…navigator.deviceMemory

JS memory limit…performance.memory

Touch and pointer…maxTouchPoints · pointer

Battery…navigator.getBattery

Connection…navigator.connection

Cameras and mics…enumerateDevices

Audio hardware…AudioContext.sampleRate

Biometrics…PublicKeyCredential

Bluetooth…bluetooth.getAvailability

Video codecs…MediaSource.isTypeSupported

Hardware video decoding…mediaCapabilities.decodingInfo

DRM…requestMediaKeySystemAccess

Storage quota…storage.estimate

Browser settings16

Color scheme…prefers-color-scheme

Animations…prefers-reduced-motion

Display colors…color-gamut · dynamic-range

Accessibility…prefers-contrast · forced-colors

Default font size and accent color…font-size: medium · AccentColor

Opened as…display-mode

Privacy signals…doNotTrack · GPC

Cookies…navigator.cookieEnabled

Permissions…permissions.query

PDF viewer…pdfViewerEnabled

Automation…navigator.webdriver

navigator in a Worker…Worker · navigator

Ad blocker…bait element

Extensions…window.ethereum · DOM marks

Tab history…history.length

Installed fonts…canvas measureText

Who takes the test

What gives people away most

The commonest setups

Who websites think you are

Where do you want to seem to be?

Every signal and the value it read

What the server sees15

Exits6

Sent with every request (headers)7

Language and region8

Fingerprints10

Device24

Browser settings16

More 1ms.dog tools

Speed & connectivity

IP & privacy

Cloud & costs

Help

Where do these numbers come from?

Why do so many people get caught?

How often is it updated?

Who takes the test

What gives people away most

The commonest setups

Who websites think you are

Where do you want to seem to be?

Every signal and the value it read

What the server sees15

Exits6Full check

Sent with every request (headers)7

Language and region8

Fingerprints10

Device24

Browser settings16

More 1ms.dog tools

Speed & connectivity

IP & privacy

Cloud & costs

Exits6