Checking

What this checks

IPv4 route. The address that actually arrived at this server. If you are tunneled, it should be your tunnel's exit and nothing else.

IPv6 route. Your tunnel server carries no IPv6 at all, so a properly tunneled device should have no working IPv6. If this check reaches the internet, that traffic is going around the tunnel. It contacts an outside IPv6-only address, because proving IPv6 escapes requires something outside to answer.

Browser. Browsers can hand your real address to any page through WebRTC, no matter how your traffic is routed.

DNS resolver. Not tested yet. Testing it needs this server to answer DNS queries directly, which collides with the ad-blocking resolver already running here. Listed so it reads as untested rather than passing.

Run again