Handing an agent a sticky residential or WireGuard path is exactly where account-sensitive tools get picky. Datacenter egress is obvious; a recycled residential exit can look fine to ASN checks and still carry fresh proxy-class evidence.

Before auth-heavy steps I treat egress as hygiene: check whether the current address already has active proxy/VPN/dial-up-pool signals and whether that evidence is fresh or aged out. IP99 (by ThreatHunter) returns a decaying risk score plus evidence_state for that second opinion—no signup for a basic lookup. Soft claim only: it will not keep a platform happy by itself; it just tells you if the exit already looks shared.