VPN and proxy checker: what websites see on your visit

The check at the top of this page answers that for your connection right now. VPN Detected reads Detected when Maskbreak's network intelligence recognises your exit, and the VPN service is named beside your address when it is known; Proxy Detected does the same for proxies, residential ones included. It is the answer Maskbreak's API would give a website that checks your visit. Other detection services use other data and can answer differently, and a site with no detection sees only your address.

Partly. The address at the top is the one websites see: if it is your VPN's server rather than your home connection, your traffic is going through the VPN. This page does not test for DNS or WebRTC leaks.

Mostly from the address. VPN and proxy services exit through servers and address ranges that network-intelligence providers track, and many of them sit in hosting companies' ranges. Some sites also compare the browser with the connection, for example its time zone against the address's country. A residential proxy exits through someone's home connection, so its address looks like a household; catching it takes intelligence on that proxy network, and no detector sees every exit. The guide Can websites tell you’re using a VPN? explains each method, and why a site can flag you without one.

Not from a bare address on this page: the Check Any IP box checks the Tor exit list and nine cloud providers' published ranges, and names the provider on a hit. A VPN or proxy verdict comes from a live visit: the check of your own connection at the top of this page, or POST /v1/evaluate with the browser token for visitors to your own site (see the VPN detection API).

A scan of your live connection evaluates VPN and proxy intelligence, datacenter ranges, and Tor exit-node lists, alongside browser and device signals. An arbitrary-IP lookup (the Check Any IP box) draws on network-reputation data — datacenter ranges and Tor exits — without the device layer.

Yes, completely free. No account needed, no credit card required. For bulk or programmatic access to the same data, sign up for an API key at /signup — the Free plan includes 100,000 IP lookups a month.

We do not publish a validated accuracy percentage. IP-only checks use available cloud-server and Tor feeds; they can miss new or unlisted addresses and do not establish a person's identity or intent. VPN/proxy and browser evidence requires a live visit. Use results as one risk input, allow review of adverse decisions, and validate your policy against your own traffic.

Yes. Sign up for a free API key at /signup (Free plan: 10,000 visitor checks a month, no card). The token-based POST /v1/evaluate returns the full signal set — risk score, network flags, and device intelligence. The arbitrary-IP GET /v1/lookup/{ip} (the IP reputation API) returns network-reputation flags (datacenter, Tor) for an IP you don't control. VPN and proxy verdicts need the live visit; see VPN detection.

Yes — use the Check Any IP box for a public IPv4 or IPv6 address, or the bulk tab for up to 20 at once, without an email. Single checks allow up to 12 per minute and 80 per day; bulk checks allow 3 batches per hour. Limits are per client IP. For programmatic volume use GET /v1/lookup/{ip} with your API key. Blank VPN/proxy cells in CSV mean not checked, not a clean result.

Nine that publish their own address ranges: AWS, Google Cloud, Microsoft Azure, Oracle Cloud, DigitalOcean, Linode/Akamai, Vultr, Cloudflare and Fastly. The lists are refreshed daily, and a hit names the provider. Other hosting companies are outside this check, so no hit does not prove an address is residential.

It is the Tor Project's own exit list, refreshed every four hours. Exits come and go within hours, so an address can join or leave the list between refreshes. It lists the IPv4 addresses exits connect from: an exit that leaves over IPv6 is not on it, so an IPv6 address never reads as a Tor exit here.

A lookup result, yes: every address has its own page at maskbreak.com/ip/<address> with the same two address checks (the Tor exit list and cloud ranges); see the IP pages. The VPN, proxy and browser checks on your own connection come from your live visit and are not on that page. Pages for cloud and Tor addresses can appear in search engines; pages for residential and mobile addresses are not indexed.