There's a website and it shows two pieces of information for a user:
"IP location: [country]" and "Detected location: [country]".
When I use a VPN, the "IP location" country matches the VPN country, but the "Detected location" always shows the real country.
I have reviewed several methods mentioned in previous questions but this site does not seem to rely on them:
It does not use HTML5 Geolocation API (the browser doesn't ask for location permission, and no location indication in address bar).
WebRTC is off (tested).
No DNS leaks (tested).
Browser language matches VPN country.
System time matches VPN country time.
Using fresh browser; never logged without VPN.
https://whoer.net, which tests for several of these factors gives me: "100.0% Your anonymity measures are safe or you don't use them."
I googled several sites which detect user location but not a single site could show the real country. So, what new or more sophisticated method is this site using?
As per discussion with Steffen Ullrich, here are more details: The site is called Paxful (https://paxful.com). It (unfortunately) needs an account to use (but a basic/unverified account should suffice). Also need to chat with another user to see what I've described. On the chat window, clicking on "Details" will show "IP location" and "Detected location" at the bottom. I can provide more details if anyone wants.