Detectors do not trust one signal. Each weak tell adds weight to a single 0 to 100 confidence score, and only when enough of them stack does the score cross the block line. Flip the signals below and watch it climb. No one signal blocks you, but a datacenter ASN comes close on its own.
geolocation consistency · the IP location, the browser timezone, and the language must agree
New York, USIP geolocation · UTC-4
browser timezoneAmerica/New_York
+16
accept-languageen-US
+12
ASN reputation
known-proxy database
WebRTC / DNS leak
suspect ≥ 40
block ≥ 70
0
cleansuspiciousblocked
score = sum of active signals
clean
Thresholds move with the site: banking blocks early, content sites stay permissive. Good systems risk-score rather than hard-block, because travelers on VPNs and expats keeping home settings trip the same alarms. Weights here are illustrative but keep the page's ordering: IP reputation dominates, consistency and leaks corroborate.