# Low IPHey MX score? Read the card, not the number > A low IPHey MX score is the sum of five cards. Untouched Chrome scored 100, 100, 70 and 0 in one afternoon, so the red card tells you more than the number. Source: https://mosaicbrowser.com/blog/iphey-score-moves ## IPHey's score moves on unmodified Chrome. Read the card. A low IPHey MX score is the sum of five cards. Untouched Chrome scored 100, 100, 70 and 0 in one afternoon, so the red card tells you more than the number. ![Five cards, one number: read the red one, beside a screenshot: a profile fingerprint in Mosaic: GPU, screen, fonts, timezone and language matched to the exit](https://mosaicbrowser.com/covers/iphey-score-moves.webp) A low IPHey MX score is a total, and the cards under it are where the reason is. IPHey checks five things (Browser, Location, IP address, Hardware, Software) and each red card prints a one-line reason. We measured unmodified, branded Google Chrome scoring 100, 100, 70 and 0 on one Mac in one afternoon. So before you change anything, find which card went red and read its line. ## The same Chrome scored four different numbers We ran the control we should have started with: Google's own Chrome, untouched, on the machine we build on, several times over an afternoon. ``` run 1 100 run 2 100 run 3 70 SOFTWARE "Click here to see", red, on real Chrome run 4 0 read taken before the page finished ``` Nothing about the browser changed between those runs. That afternoon, and what it did to an investigation that had treated 100 as a constant, is written up in [the score moved with the address, not the browser](https://mosaicbrowser.com/blog/iphey-score-moves-with-address). This piece is the practical half: what to read when your own number comes back low. ## A 0 is usually the page, not you IPHey renders a template first and fills the cards in afterwards. Until it has, every card reads `Temporary value` and the headline says `0 MX SCORE`. A script that reads the page text too early, or a person who screenshots it in the first seconds, records that template as a result. Our detection runner gives IPHey 20 seconds to settle and then reads the cards by name, never the page text with a regular expression. If you are reading it by eye, wait until every card has a value in it. Mosaic is a desktop app Email yourself the link and open it on your computer. [How it works: Machines that exist](https://mosaicbrowser.com/features/real-fingerprints) ## A low IPHey MX score: which card is red? Each red card has a detail line, and the line is specific. These are the ones we have seen ourselves, with what turned out to be behind them. ### Browser: "inconsistent browser fingerprint (whale)" This was red on every desktop profile we made for a long time, at MX 90, Unreliable. Google's unmodified Chrome for Testing got the identical line on the same exit in the same minute, so it was never about a value we had set on a profile. It came from something both builds share: neither is Google-signed Chrome, and the Widevine module in a browser without Google's signature sends a device certificate in the clear. The long version, through the speech voices and the field-trial APIs on the way, is [the whale signal, followed to the end](https://mosaicbrowser.com/blog/iphey-whale-signal). If your Browser card says this, compare against a stock Chrome before you touch any profile setting. ### Location: "masked or inconsistent location data (light)" This is the browser's own idea of where it is (timezone, geolocation, language) disagreeing with where the address is. We saw it on stock Chrome for Testing sent through a US residential exit from a Mac in Austria: Location red, MX 80. Our profile on the same exit had a green Location card, because a Mosaic profile takes its timezone, language and geolocation from the exit it browses through. A red Location card is the cheapest one to fix and the most common. ### IP address: the exit's own history A residential address can already be listed as a proxy before you ever use it. We measured one in Wichita that several detectors knew, in [the residential IP several detectors already knew](https://mosaicbrowser.com/blog/residential-ip-detected-as-proxy). No browser setting changes that card. A different exit does. ### Hardware and software These read the machine: GPU, screen, fonts and the software the browser says it runs on. We have seen Software go red on real Chrome on one run out of four, which is why one red Software card on its own is a reason to run again rather than to rebuild anything. One result here did hold up across runs. On the same engine and the same exit, a fresh profile claiming macOS on a Mac scored 100/100 Trustworthy, and one claiming Windows scored 80/100 Unreliable. Fonts and the way the system draws them come from the real computer, and no setting reaches them. ## What the labels mean In everything we have recorded, 100 came with Trustworthy, and both 90 and 80 came with Unreliable. So the label tells you whether anything is red, and the number roughly tells you how much. Neither tells you which card, so read the card. ## How we read a low score 1. Wait until every card has a value. A `Temporary value` anywhere means the read is void. 2. Write down which cards are red and copy each one's detail line exactly. 3. Open a plain Chrome on the same exit, in the same minute, and run it there too. A card that is red in both is about the address or the moment. 4. Run it more than once. A card that changes colour between runs with nothing changed is flaky, which is neither a pass nor a fail. 5. Only then change one thing, and measure again. Our runner does steps 1 to 4 for every detector in its catalogue, and how it keeps a site that was down apart from a real failure is in [running fingerprint tests unattended](https://mosaicbrowser.com/blog/automating-fingerprint-tests). ## Questions ### Why is my IPHey MX score low? Because one or more of its five cards came back red: Browser, Location, IP address, Hardware or Software. Each red card names a reason in its detail line, and that line says far more about what to fix than the total does. ### Does a 90 on IPHey mean my browser is detected? Not on its own. We have seen Google's own Chrome for Testing, unmodified, score 80 and 90, and branded Chrome score 70 on a run where nothing about it had changed. A 90 tells you one card is red; which card it is tells you whether it is the browser at all. ### What does a 0 MX score on IPHey mean? In our runs, every 0 was a reading taken before the page had finished. IPHey draws its cards as placeholders reading Temporary value and fills them in later, so a read that comes too early sees the template. ### How do I tell whether a low score is my profile or my proxy? Open a plain Chrome on the same exit, in the same minute, and run IPHey in both. If the stock browser loses points on the same card, the cause is the address or the moment, not the profile. ## Related [IPHey's score moved with the address, not the browser](https://mosaicbrowser.com/blog/iphey-score-moves-with-address): IPHey score changes even on an untouched Chrome: 100, 100, 70 and 0 in one afternoon. The score follows the exit and the moment; the browser card does not. [IPHey's "(whale)" signal, and what it was really about](https://mosaicbrowser.com/blog/iphey-whale-signal): IPHey's inconsistent browser fingerprint (whale) looked like a version problem. We followed it through branding and JavaScript to a Widevine certificate. [The residential IP several detectors already knew](https://mosaicbrowser.com/blog/residential-ip-detected-as-proxy): A residential proxy can be detected as a proxy because it is one. On one Wichita exit, FingerprintJS and incolumitas never loaded in three rounds. [Running 49 fingerprint tests unattended, and what that takes](https://mosaicbrowser.com/blog/automating-fingerprint-tests): To automate browser fingerprint testing, tell a failed profile from a dead site, an unreadable page and your own bug. Our runner names each across 49 rows. [The RTT client hint, read off the wire](https://mosaicbrowser.com/blog/rtt-on-the-wire): ECT, RTT and Downlink headers behind a proxy, measured: a claimed round trip moved JavaScript to 300 and left the RTT header at 50. So we claim neither. [fingerprint.com wouldn't load through our proxy, and that was a result](https://mosaicbrowser.com/blog/fingerprint-demo-not-loading): Through one residential exit the FingerprintJS demo hung; from the same Mac with no proxy it loaded. Our runner blamed itself. The exit was why. [Same IPHey score, opposite reasons](https://mosaicbrowser.com/blog/iphey-same-score-different-signal): IPHey Unreliable on a normal Chrome is usually the exit. Our profile and a stock Chrome both got MX 90, for a browser signal and a location signal. [A profile in Austria claimed New York](https://mosaicbrowser.com/blog/austria-claimed-new-york): Browser location does not match IP: a no-proxy profile made in Austria claimed New York. One failed lookup was never retried, and a table filled the gap. ## Mosaic, on your own computer The browser this blog is about: its own Chromium, fingerprints from real machines and a proxy exit per profile. Free holds 3 profiles. Pro is $49 a month for any number. Mosaic is a desktop app Email yourself the link and open it on your computer.