Incogniton proxy status: no connection
Last checked 2026-09-10
incogniton proxy status no connection
Incogniton reports the proxy status by making a test request through it. A "no connection" result means that request did not come back, so the profile will not launch with that proxy attached.
Most of the time the failure is on the proxy side or in how the credentials were entered, not in Incogniton. Work top to bottom; each step has a copy-paste command that reproduces what Incogniton is doing.
Replace USER, PASS, HOST and PORT with your own values in each command. Keep the single quotes: an ampersand or a hash in a generated password will otherwise be eaten by your shell.
Five-minute checklist
1. Check the credentials work at all
A 200 here means the host, the port, the protocol and the credentials are all fine, and the status Incogniton reports is not about reachability at all.
curl -sS -o /dev/null -w 'http_code=%{http_code}\n' --max-time 15 --proxy 'http://USER:PASS@HOST:PORT' https://example.com 2. Separate "wrong credentials" from "not reachable"
Send the same request with no credentials. A 407 proves the proxy is listening and demanding authentication, so the host and port are right and only the credentials are wrong. A timeout or refused connection means the host or the port is the problem, which points at the ip:port:username:password string itself.
curl -sS -o /dev/null -w 'http_code=%{http_code}\n' --max-time 15 --proxy 'http://HOST:PORT' https://example.com 3. Confirm whether only HTTPS is broken
HTTPS through a proxy needs the CONNECT method. Some upstreams allow plain HTTP and refuse CONNECT, or have the exit port for CONNECT blocked. If this command succeeds while the first one fails, the problem is CONNECT, not the credentials, and no change of connection type inside Incogniton will fix it.
curl -sS -o /dev/null -w 'http_code=%{http_code}\n' --max-time 15 --proxy 'http://USER:PASS@HOST:PORT' http://example.com 4. Confirm the exit IP and rule out IP-based authentication
Some upstreams authenticate by source IP rather than by username and password, so what you need to check against the allowlist is your own machine's direct egress IP, not the address the proxy would show. The empty --proxy value is deliberate: it forces a direct connection so the reported IP is genuinely yours, not the proxy's.
curl -sS --max-time 15 --proxy '' https://api.ipify.org 5. Read the handshake to see which layer stops
The verbose trace shows whether the TCP connection, the proxy authentication exchange, or the TLS handshake is where it stops. That is the difference between a network problem, a credentials problem, and a certificate problem.
curl -sS -v --max-time 15 --proxy 'http://USER:PASS@HOST:PORT' https://example.com 2>&1 | head -n 25