Checks ten common ports on your own public address, the one this request arrived from. Nothing else is touched.
Heuristics matched on ASN, owner name and whois organisation. A hit is strong evidence: a DigitalOcean address is a rented machine whatever it runs. A miss proves nothing. VPN exits sit on residential-looking ranges so this check comes back clean.
Reverse DNS is the name an owner publishes. A PTR like vps-1234.hosting.example says rented infrastructure. Many hosts publish none, so an unresolved PTR clears nothing.
Geolocation is the provider's estimate. City precision is often wrong; only country is worth trusting.
Everything here travelled with the request, before you clicked.
A Via header is a proxy announcing itself to the destination. Forwarded chain is the X-Forwarded-For list, each hop's claimed origin. Both are unresolved on a direct connection, and both are trivially forged.
A lookup on another address carries no headers, so this tab stays on your connection.
A server, a VPN endpoint, an address from your logs. IPv4 and IPv6 work. Literal addresses only, no hostnames.