In more mature variations of many browsers, there were being safety holes in the implementation on the XMLHttpRequest API. This API makes it possible for webpages to specify a proxy server that might get the reply, and https://vpnpitbull.com/tech/what-is-my-private-ip/