Anonymous Proxies

An anonymous proxy, in the traditional HTTP anonymity classification, hides the client's real IP address but leaves a sign that a proxy handled the request. The website receives the proxy's exit IP and a marker such as the Via header.

The broader Proxy Anonymity Levels guide compares this category with transparent, distorting, and elite proxies. Here, “anonymous” describes what the proxy reveals in forwarded HTTP requests.

For a buyer trying to hide proxy use, this old category fails that requirement. It keeps the original IP out of the request but still announces the intermediary. Hiding your home address is useful; advertising the proxy does nothing to help it pass unnoticed.

What the website receives

Suppose your public IP is 198.51.100.24 and the proxy's exit IP is 203.0.113.80. The website receives the connection from 203.0.113.80. In this plain HTTP example, the proxy adds no client address in X-Forwarded-For, but it sends:

Via: 1.1 proxy

Via records an intermediary along the request's path. The word proxy is an example name for that intermediary, not the customer's identity. The header can disclose the forwarding step without disclosing the original client IP.

Why an anonymity check can still detect a proxy

A checker can show the correct proxy IP and still report “Proxy detected.” These results answer different questions: which address made the connection, and did the request contain evidence of an intermediary? Both results can be correct. The checker does not need to discover your home IP to detect the proxy marker.

That distinction matters when accessing a website that rejects requests carrying such a marker. The request can be refused even though your original address never reached the site. An “IP hidden” result alone does not establish that the proxy will be accepted.

The label on a service versus the label in a test

The word “anonymous” also has a broader meaning: a proxy that hides your IP from the destination. Used this way, it can include proxies that would be called elite in the older classification. A service advertising anonymous proxies is therefore not necessarily saying that it forwards a Via header.

The context changes the meaning. A test using the traditional categories reports a particular kind of header behavior. A general claim of anonymity does not specify that behavior. Neither meaning tells you whether the IP is shared, residential, static, or reserved for your use.

Where this classification stops

The illustrated distinction concerns readable HTTP requests. With HTTPS carried through an ordinary CONNECT tunnel, the request to the website is encrypted between the client and the website. A proxy forwarding that tunnel cannot insert Via into the encrypted request without intercepting and decrypting the traffic. A plain HTTP test therefore does not describe everything the same proxy does with HTTPS.

Nor does “anonymous” mean that everyone loses sight of you. The proxy operator still receives your connection, and logging into a website identifies your account regardless of the IP used. The category describes client-IP disclosure in requests; it is not a promise of an untraceable identity.