What do proxy, VPN, and Tor change — and how can you review leak clues?
A proxy commonly changes the exit for selected apps or protocols; a VPN commonly creates a system tunnel; Tor provides another kind of multi-hop exit. Actual coverage depends on client, routing, DNS, and application configuration, and the network type alone does not guarantee anonymity.
You can separately inspect public WebRTC candidates, resolver country codes seen by a DNS test, and whether IPv4/IPv6 use the expected exits. Differences are possible configuration clues, while unknown or matching results do not rule out a leak.
IPOK's WebRTC test contacts public STUN on click and parses candidates locally; DNS contacts bash.ws test endpoints; dual stack contacts IPOK's own single-stack endpoints. The application does not build a visitor profile from these results.