How websites detect a VPN
A website never sees the VPN app on your phone or laptop. It only sees the request that arrives at its server, plus whatever your browser shares through JavaScript. That is still enough. Services like streaming platforms, sportsbooks and banks combine a handful of VPN detection signals into a risk score, then decide whether to block you, ask for verification or show a proxy detected error.
This tool runs the same checks and weights them by how heavily real sites rely on each one:
| Signal | What it looks at | Weight | How to fix it |
|---|---|---|---|
| VPN and proxy blocklists | Whether your IP is listed as a known VPN, proxy or Tor exit | 35 | Switch server, or use a provider that rotates IPs often |
| IP type | Whether the IP belongs to a data center (ASN) or a home ISP | 25 | Use a dedicated or residential IP add on |
| Timezone match | Device clock compared with the IP location | 15 | Pick a server in your own timezone |
| WebRTC address | A second IP revealed by browser calling features | 15 | Turn on WebRTC leak protection in the VPN or browser |
| Browser language | Languages your browser requests compared with the IP country | 10 | Usually safe to ignore unless other signals fire |
What your detection score means
- 0 to 29, low risk: your connection looks like an ordinary visitor. Most region locks and VPN blocks will let you through.
- 30 to 59, medium risk: relaxed sites work, but strict ones such as BBC iPlayer, Hulu or DAZN may spot you. Fix the flagged items one by one.
- 60 to 100, high risk: the IP is almost certainly on a blocklist or clearly from a data center. Changing server is the fastest fix; changing provider is the lasting one.
A high score does not mean your VPN is broken or that your traffic is exposed. Your data is still encrypted. It only means a site can guess that a tunnel is in use. To confirm the tunnel itself is sealed, run our guide to checking if your VPN is working, which includes the leak test.
Why data center IPs are the biggest giveaway
Every IP address is owned by a network with an autonomous system number (ASN). Home broadband comes from consumer ISPs, while almost every VPN server sits in a rented data center. Sites can look up the owner instantly, so an address from a hosting company is a strong hint before any other check runs. The ARIN guide to ASNs explains how these networks are registered.
Providers fight this in different ways. NordVPN and Surfshark sell dedicated IPs that only you use, so they rarely land on shared blocklists. ExpressVPN rotates its streaming servers quickly, and Proton VPN runs separate servers tuned for streaming on its paid plans.
How WebRTC exposes a second address
WebRTC lets browsers make video calls without plugins. To connect peers, it asks STUN servers for your public address, and on some setups that request skips the VPN tunnel. If a site sees two different IPs, it knows you are tunnelling and may learn your real location. The MDN WebRTC documentation covers how the API gathers these candidates. Most good VPN apps block this by default; if yours does not, turn on WebRTC protection in the app or in a browser extension.
How to lower your detection score
- Switch to a nearby server in your own timezone, or set your device clock to match the server location.
- Use a streaming optimized server or a dedicated IP rather than a crowded general server.
- Enable WebRTC and IPv6 leak protection in the VPN settings.
- Clear cookies and location permissions for the site, then reload with the VPN already connected.
- Change provider if every server scores high. Free VPNs share small IP pools that are almost always blocked.
Watching matches abroad is where detection bites hardest. Our picks for the best VPN for live sports and the step by step Hulu Live TV guide both rely on servers that pass this test.
Frequently asked questions
Can a website tell if I am using a VPN?
Yes, often. Websites cannot read your VPN app, but they can see that your IP belongs to a data center, check it against VPN blocklists, and compare your device timezone and language with the IP location.
What is a good VPN detection score?
A score under 30 means your connection looks like a normal home visitor. Between 30 and 59 some sites will notice. Above 60 strict services such as streaming platforms and betting sites will very likely block you.
Does this test store my IP address?
No. Your IP is read for the check and sent to an IP lookup service to find the network owner and blocklist status. Nothing is saved on our side.
Why does the test say detectable when my VPN works?
A working VPN still uses a server IP. Being detectable does not mean your traffic is exposed, only that sites can guess a VPN is in use. Your encryption and privacy are not affected.