Exposure score

Each signal below carries an entropy weight from public fingerprinting studies — the bits of identifying information a typical value adds across a population. Because many traits are correlated (your OS largely predicts your fonts, GPU and user agent), the identifiability score does not just add them up: traits are grouped into correlation clusters and discounted, so the total tracks the ~18–22 bit ceiling real studies observe. Read it as an upper bound — on a real crowd many browsers share more than this implies. The Measured here figure is the actual rarity among this site's visitors; the exposure percentage reflects how much of your device and network configuration is visible to sites you visit.

Identifiability

Entropy (max)
Rarity (upper bound)
Measured here
Top traits

Exposure

Surface
Revealing

Connection

Public IP
18.97.9.171
IP version
IPv4
Reverse DNS
18-97-9-171.crawl.commoncrawl.org
Location
Ashburn, Virginia, United States
Timezone (IP)
America/New_York
Coordinates
39.0469, -77.4903 (±20 km)
ASN
AS14618
Provider
Amazon.com, Inc.
Tor exit node
No

HTTP headers

Sent by your browser with every request. proxy rows were added by the server's reverse proxy, not by you.

Host netz.tools
X-Real-Ip proxy 18.97.9.171
X-Forwarded-For proxy 18.97.9.171
X-Forwarded-Proto proxy https
Connection close
User-Agent CCBot/2.0 (https://commoncrawl.org/faq/)
Accept text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language en-US,en;q=0.5
Accept-Encoding zstd, br, gzip

CPU & memory

Logical CPU cores
Device memory
Architecture
Bitness
Platform
Device model

GPU

Renderer
Vendor
WebGL
WebGPU adapter

Screen

Resolution
Available area
Viewport
Pixel ratio
Color depth
Orientation
Color gamut
HDR

Browser

User agent
CCBot/2.0 (https://commoncrawl.org/faq/)
Brands
Languages
en-US, en
Timezone (browser)
Do Not Track / GPC
Cookies
Storage
Storage quota
PDF viewer
Touch points
Automation
Private mode

Fingerprint probes

Hashes derived from how your hardware and software render things. Combined, they can identify you across sites without cookies.

Canvas hash
Audio hash
Detected fonts
Font list
Locale

WebRTC leak test

WebRTC can expose local and public addresses even behind a VPN. Modern browsers usually mask local IPs as random .local names.

ICE candidates

DNS leak test

Your browser resolves a random one-time name that only this site's DNS server can answer, revealing which resolver actually handles your lookups. Behind a VPN, answers arriving from your ISP's resolver are a DNS leak. Only the resolver's address — and, if it forwards one, your network prefix rounded to /24 (IPv6: /48) — is kept, for ten minutes.

Resolver
Client subnet (ECS)
Verdict

IPv6 leak test

Many VPNs tunnel only IPv4 and let IPv6 traffic take your normal route, exposing your real network. This forces one request over each protocol and compares which networks they exit from.

IPv4 address
IPv6 address
IPv6 provider
Verdict

Network & power

Connection type
Downlink
Round-trip time
Data saver
Battery

Capabilities

Further APIs that vary between installs and feed the identifiability score.

Speech voices
Media devices
Permissions
Display prefs

Consistency checks

Cross-checks between your IP and your browser that often reveal a VPN, proxy or spoofed setting.