Whoer Proxy Check: Reading the Disguise Score

Whoer.net's proxy check compares your exit IP with everything else your browser reports: DNS resolver, time zone, language and WebRTC, plus IP-type and blacklist databases. The "Your disguise" percentage drops when those signals disagree. On a working mobile proxy the IP should read as a carrier address. Most lost points come from browser settings, not from the proxy.

What does the Whoer disguise score measure?

The Whoer disguise score measures agreement. Whoer's own page (as of October 2026) says its VPN check compares "your IP country with DNS, time zone/locale" and looks "for tunneling signs". It says its proxy checker "inspects headers, scans common proxy ports (8080/3128/1080)", catches fingerprintable patterns, and flags "datacenter IP vs residential/mobile".

A clean result reads "Your disguise: 100% Your anonymity measures are safe or you don't use them". Octo Browser's guide to anonymity checkers puts 90-100% as looking like a regular user from the declared country. Around 40-70%, it says, comes with red or yellow warnings.

Whoer.net also advertises VPN and proxy services on the same page. Read the score as a consistency check, not a verdict.

How should Whoer read a mobile proxy, row by row?

A mobile proxy exit should look like an ordinary phone subscriber in the proxy's country. Every VoidMob exit is a real 4G/5G device on a consumer carrier connection, so its public IPv4 address sits behind the carrier's CGNAT and is shared with that carrier's ordinary subscribers. A clean exit therefore reads as a mobile carrier address.

If the ISP row shows a cloud provider while you expected a carrier, Mobile Proxy Shows as Datacenter covers the causes.

A Proxy: Yes on a carrier IP can come from your side of the chain: a local tool, a second proxy or a corporate gateway can add forwarding headers before traffic reaches the exit. It can also mean the range appears in a proxy database. To check whether the address is listed, use the IP Blacklist Checker. A listing on a shared carrier address often reflects other subscribers' traffic rather than yours.

Why did my Whoer score drop?

A Whoer score drops when one panel contradicts the IP. Confirm the exit first, then work through the causes below in order.

Time zone does not match the exit

Whoer's TIME panel shows Zone, Local and System. A US exit with a browser clock on Central European Time is the most common lost point.

Set the browser profile's time zone from the proxy IP. Most antidetect browsers have a setting that fills time zone, geolocation and language from the proxy automatically. The integration guides show where that setting sits in each browser. In a plain browser, change the operating system's time zone to the exit's region.

Browser language points to another country

The LANGUAGE panel reads the languages your browser sends. A French exit with only en-US and ru listed is a mismatch. Set the profile language to the exit country's main language first, and keep a second language only if a local user plausibly would have one.

DNS resolver sits in another country

The DNS row shows which resolver looked up Whoer's test hostname. If that resolver belongs to your home ISP, your machine resolved the name locally and only the page traffic went through the proxy. A resolver in another country is weaker evidence on its own, since some carriers and public resolvers answer from elsewhere. Either way, resolving DNS through the proxy settles it.

In curl and Python requests, the socks5h scheme sends the hostname to the proxy instead of resolving it locally. With a VoidMob proxy list, SOCKS5 uses the same host, port and credentials as HTTP:

curl -x "socks5h://<list-username>:<list-password>@proxy.voidmob.com:10000" https://ipinfo.io/json

1import requests  # pip install "requests[socks]"2 3proxy = "socks5h://<list-username>:<list-password>@proxy.voidmob.com:10000"4r = requests.get("https://ipinfo.io/json", proxies={"http": proxy, "https": proxy})5print(r.json())

The list username and password come from the "Proxy Lists" section of your order page. The curl proxy and Python requests proxy guides cover the other flags.

WebRTC exposes your real IP

WebRTC can report your local or public address directly to the page, outside the proxy. In the WebRTC panel, an address other than the proxy IP costs points and gives away the real connection.

Set WebRTC in the browser profile to replace the address with the proxy IP, or disable it. Then confirm the result with the WebRTC Leak Test.

Rotation changes the exit mid-test

A per-request rotating proxy can send Whoer's page, DNS probe and location lookup out through different devices. Different devices can mean different cities or carriers within one test, and the panels then disagree with each other.

Run checks on a sticky session. On a VoidMob proxy list, set rotation to Sticky or a timed interval longer than the test. A dedicated device holds its IP until you rotate it. What Is a Sticky Session on a Mobile Proxy? explains the trade-off.

Does 100% on Whoer mean a platform will trust you?

No. A 100% Whoer score means your IP, DNS, time zone, language and WebRTC agreed at the moment of the test.

Platforms also weigh behaviour, account history, deeper fingerprint signals and how many accounts share a device. A perfect Whoer score is not a pass from any particular site. Can Mobile Proxies Be Detected? covers what sites can still tell.

How does Whoer compare with Pixelscan and BrowserLeaks?

Whoer.net gives one consistency percentage plus raw panels. Pixelscan focuses on whether the fingerprint looks masked or inconsistent. BrowserLeaks shows raw data per test with no score.

Each has its own reading guide: Pixelscan proxy verdicts and BrowserLeaks proxy lines. VoidMob's Location Consistency Test and IP Type Checker run the same IP-versus-time-zone and IP-type comparisons.