Five kinds of value
- Observed: measured by our server (your address, request headers, the TLS check) or by a test in your browser (latency, speed, WebRTC).
- Browser: reported by your browser through standard web APIs.
- Lookup: from a named database or registry: DB-IP or MaxMind for location and ASN, RDAP for registration, RIPEstat for routing, public resolvers for DNS, the Tor Project and DNS blocklists for reputation.
- Estimated: worked out from other values, with a confidence level.
- Unavailable: not exposed to websites, with the reason.
What we store
Nothing about you. Lookups are cached in server memory for minutes to hours so repeated requests are fast, then dropped; a restart clears them all. Reports are built in your browser and exist only where you save them. We set no tracking cookies.
Device location, when you choose to share it, stays in your browser. WebRTC results stay in your browser.
Protecting the tools from misuse
Tools that connect to other servers (certificate and header checks) resolve the name once, refuse any private, reserved, loopback or cloud metadata address, and connect only to the address they checked, on fixed ports. Every tool is rate limited per connection. They cannot be used to scan ports or reach internal networks.
Attribution
IP geolocation by DB-IP (db-ip.com), licensed under Creative Commons Attribution 4.0. When configured, GeoLite2 data created by MaxMind. Vendor data from the IEEE Registration Authority. Routing data from RIPE NCC RIPEstat.