Read the curl IP check

The command is one address. The useful result is that address next to the browser.

curl -s https://rookvpn.com/check/api/ip/address

The response is the public address of the path curl used. It is not the address of your phone, and it is not the address the browser used if the browser is proxied separately.

Run it once with the VPN off and keep that line. Run it again after Connect. A change means the terminal’s default route moved. No change means the terminal is still on the ISP path, even if a browser extension or a system proxy moved only the browser.

If you are on Windows, run it in PowerShell, not only in a browser tab that has its own proxy. If you are in WSL, the Linux network namespace can differ from Windows. Note which environment you typed the command in. A result without that note is not evidence.

Do not paste the command into a page that already has a VPN and expect it to describe a different device. The server sees the client that opened the TCP connection.

When the terminal and the browser agree on the exit, continue with WebRTC and DNS in the leak test. When they disagree, fix the mode of the client (TUN versus proxy) before you look at browser flags. The longer curl notes are in check public IP via curl.