Destination evidence

Proxy target reachability: read the response without overclaiming

A target check makes one lightweight server request after the neutral exit check. Its response headers describe that request, not every page, account, browser, or future visit.

Read the diagnostic method
Method version
2026.07.18
Last reviewed

This method is maintained by the TrueProxies product team. The named maintainer is not presented as an independent auditor or third-party certification body.

Quick answer

What this evidence can establish

The checker first requests IPify through the proxy and validates the public exit IP. If Google or Wikipedia is selected, it then starts a second proxied HTTPS request and stops timing when the first response headers arrive; it does not download the target body. A 2xx or 3xx response is reported as accepted. A 4xx or 5xx response is reported as not accepted with its HTTP status. Neither result proves universal access, a destination-wide block, browser compatibility, or anonymity.

Evidence boundaries

Observed signal versus unsupported conclusion

A trustworthy proxy diagnostic states exactly what one result shows and keeps broader claims outside the verdict.

Evidence boundaries for Proxy Target Reachability
SignalWhat it establishesWhat it does not establish
Neutral exit checkThe proxy completed the fixed IPify HTTPS request and returned a valid public exit address.That Google, Wikipedia, or the visitor's actual destination will accept the same route.
2xx/3xx target headersThe selected destination returned an accepted-range initial response to this lightweight request.That redirects complete, page bodies load, JavaScript runs, accounts remain usable, or future requests succeed.
4xx/5xx target headersThe selected destination returned a client- or server-error status for this request.That the proxy IP was banned; authentication, rate limits, URL policy, maintenance, headers, or automation controls can produce the status.
Target response timeElapsed checker-server time until the initial response headers arrived through the proxy.Body throughput, full page load, browser rendering, CAPTCHA completion, or application success.

Diagnostic workflow

Apply the method without changing the question

Keep the endpoint, transport, target, and evidence boundary explicit so a retry remains comparable.

  1. Establish neutral connectivity

    The fixed IPify request must return HTTP 200 with a valid public address before target evidence is meaningful. A failed exit check remains a proxy or upstream failure, not a target result.

  2. Send one fixed target request

    Google uses its lightweight generate_204 endpoint. Wikipedia uses its public homepage. The checker records only initial response-header status and timing and does not download the target body.

  3. Classify the status conservatively

    Initial 2xx and 3xx responses are accepted. Initial 4xx and 5xx responses are not accepted. Redirects are not followed as a browser journey, and no cause is inferred from the status alone.

  4. Reproduce the actual workload separately

    Use an authorized client test with the real destination, method, headers, session, and rate policy. Do not add arbitrary private or user-supplied target URLs to this public checker.

Machine-readable methodology

Providers, data fields, timing boundaries, timeouts, privacy, and limitations are published as versioned JSON.

Open method JSON

Interpretation reference

What the first target response means

The status family is evidence from one request. The next step depends on the destination and authorized workload, not a universal good/bad label.

HTTP response families in the proxy target check
ResponseChecker interpretationImportant qualification
2xxAccepted for this target request.The target body is not downloaded, so page content and application behavior remain untested.
3xxAccepted-range initial response.The redirect chain is not followed; its destination and final outcome remain unknown.
400 / 404Not accepted for this request.The path, method, headers, or destination policy may explain the response; it is not automatic IP-block evidence.
401 / 403Not accepted for this request.Authentication, authorization, automation controls, region, reputation, or request shape may be involved.
407Proxy authentication failed before usable target evidence.Review the proxy credentials and authentication mode, not the destination account.
408 / 429Not accepted or rate-limited for this request.Retry policy and destination limits matter; do not increase traffic to force a different result.
5xxThe target returned a server-error response.This may be transient or target-side and does not prove the proxy route caused it.
No headers before timeoutNo target response evidence was obtained within eight seconds.Network delay, proxy behavior, TLS, or destination reachability may be involved; no HTTP status can be inferred.

Troubleshooting

Turn the observation into the next safe check

Keep credentials private and change one variable at a time.

General connectivity works but Google returns 403 or 429

Likely meaning: The neutral route works while Google declined or limited this lightweight request.

Next check: Respect the destination's terms and rate limits; test the authorized real workflow without calling the proxy dead or universally blocked.

The target returns 3xx but a browser still fails

Likely meaning: The checker records only the initial redirect and does not follow cookies, scripts, challenges, or the final page.

Next check: Inspect the browser's full redirect chain and final response under the same authorized route.

Wikipedia is accepted but another website is not

Likely meaning: Destinations use different networks, policies, reputation data, headers, and application controls.

Next check: Treat Wikipedia as evidence only for Wikipedia's fixed request and test the actual destination separately.

Target status changes between runs

Likely meaning: The exit, route, rate state, destination service, or policy decision may have changed.

Next check: Record repeated results, exit changes, timestamps, and request rate without publishing the raw exit address or credentials.

Limitations

  • Only the curated Google and Wikipedia targets are available; arbitrary targets are excluded to prevent server-side request forgery and abuse.
  • The request is generated by the server-side checker, not a browser, mobile app, scraper, logged-in account, or the visitor's own TLS stack.
  • Only the initial response headers are used for target reachability. Bodies, redirects, JavaScript, cookies, challenges, and application state are not executed.
  • A 4xx or 5xx response is described as not accepted, never as verified blocking of the exit IP.
  • Destination behavior, endpoints, rate limits, and network policies can change after the method version was reviewed.