Troubleshooting

ERR_TUNNEL_CONNECTION_FAILED#

The browser shows "This site can't be reached" with ERR_TUNNEL_CONNECTION_FAILED when the way through the proxy to that site was refused. The browser cannot say why, so look at when it happens:

Every time, for one site#

• A domain list blocks it. The team's Sites lists, or the profile's own domain list, refuse that site; or an allow only list does not name it. Ask the owner which list applies to you in that project.
• The proxy refuses that site. Some proxy plans allow only a list of sites, or block certain sites or ports. Check the proxy: under Sites it says which platforms it lets through. When it is the profile's own site, the row says so: Proxy blocks, with the site under it (what to do). A refusal of some other site, while the profile's pages open, shows only in that tab. The log has each refusal with the proxy's answer.

Sometimes, then it works again#

• The proxy's exit is busy or unstable, which residential and mobile exits often are under load. SablePower already tries twice more before the browser sees an error, so what is left is a proxy failing for longer. Reload; if it keeps happening, check the proxy and consider another one.
• Make sure SablePower is up to date (Check for updates). Versions before 1.2.3 gave up at the first failure.

For every site#

The proxy is down or refuses this computer. SablePower now says what the proxy answered: in the profile's row under Status (for example Proxy refused: wrong login), on the profile's start page next to Source, and in the result of Check proxy. The table in What the proxy answered says what each answer means and what to do.

Still stuck? Tell us the profile, the site and the time it happened, and attach the log: every refused connection is written there with the reason the proxy gave.

What the proxy answered#

When the proxy will not let a profile through, SablePower keeps its answer and shows it in three places: the row's Status while the profile is open, the start page (under the exit IP, next to Source), and Check proxy in Proxies. The answer goes away from the row as soon as a page gets through again.

The row says it only when the proxy is what stops the profile:

• a wrong or missing login, or a plan out of data: at once, since no site gets past that;
• the profile's own site refused: an app window's page (such an app window is not opened at all now), or the profile's first start page. The row says Proxy blocks with the site under it, for example tiktok.com: what to do;
• no page at all getting through after the profile opens: after a few seconds, while nothing is still on its way.

One site refused while the others open is not the proxy failing, and the row stays quiet: only that site's tab shows the error. The same for the location services SablePower asks at launch (ipinfo.io and the like): some providers refuse them with 403 and let every page through, so a refusal there never shows in the row by itself (more). What each answer means:

The start page says the same in a sentence, with the site and the time, for example: Pages are not opening through the proxy. At 2026-10-21 14:20 UTC it refused www.instagram.com: The proxy refused the login and password (it answered 407 Proxy Authentication Required). The proxy's address and login are never shown there.

A site will not open: the proxy blocks it#

Some proxy providers sell an address with a list of sites it may reach, and refuse every other site, often with 403 not allowed. Through the same proxy, Instagram and Facebook can open while TikTok, X or Reddit never do. That is the provider's rule: SablePower cannot get around it, and it never sends a site past the proxy.

What you see:

• An app window of a site the proxy refuses is not opened. The bar says why, for example: Your proxy's provider refuses tiktok.com: it answered 403 not allowed. Instagram works on this proxy. Use another proxy for this account, or ask the provider to allow TikTok. The row's Status says Proxy blocks with tiktok.com under it; point at it for the whole sentence. A profile open in its browser stays open.
• In a browser window, that site's tab shows ERR_TUNNEL_CONNECTION_FAILED. When it is the profile's own site (its first start page), the row says Proxy blocks and the site too.

What to do:

1. Check the proxy. Under Sites it lists the platforms it lets through and the ones it blocks.
2. Give this account a proxy that allows its platform (profile window, Proxy tab), or ask the provider to allow the site on your plan.

"Instagram works on this proxy" is said only when SablePower saw Instagram open through that same proxy, with the same login, in the last 30 minutes. Before an app window opens, SablePower asks the proxy for its site the way the browser would and closes the connection at once; it runs alongside the usual checks, so it adds no wait.

"Could not find out where this proxy comes out"#

Before a profile opens, SablePower asks where its proxy comes out, so the profile's time zone and languages match that country. If no location service answers, and SablePower has never had an answer for this proxy, it does not open the profile: opening on UTC time and US English is exactly what a site reads as a faked time zone.

1. Wait a minute and open it again. Location services limit how often one address may ask, and shared proxy addresses hit that limit often.
2. Check the proxy in Proxies. If it says Not working, the table in What each result means says why.
3. If it says Working, place unknown again and again, set the profile's Time zone and Languages by hand to the proxy's country in the profile window (how). Then nothing needs to be asked at launch.

Once SablePower has had one good answer for a proxy it keeps it. When no service answers later, the profile opens with that saved answer and says so at the top. If the proxy changes country, check it before the next launch.

The location services are asked side by side, so a slow one, or one the proxy refuses only after a while, does not hold up the others: the first good answer is used. An answer is used again, without asking, when the same proxy (same address, login and password) opens again within 5 minutes, for example the TikTok app right after the Instagram app. Some proxy providers refuse location services with 403 not allowed. A profile still opens when another service answers, or with the saved answer, and nothing about it shows in the row. With no answer at all and none saved, the profile is not opened, and the message says what the proxy answered.

Pixelscan and BrowserScan results#

The start page of every profile links to Pixelscan and BrowserScan. They are useful, but they are not the sites you work on, and each has its own databases and opinions. Read a red line like this:

"Proxy detected" or "Proxy: yes"#

That line is about the address, not the browser. The checker looks the address up in lists of data centers, VPNs and known proxy ranges, and may probe it for open proxy ports. A data center or cheap shared proxy is flagged whatever the browser does; residential and mobile addresses much less. No browser can change what an address is: if it matters, use a better proxy. Diagnose in the proxy window says when an exit belongs to a hosting company (how). The browser itself does not give the proxy away: WebRTC and site name lookups go through the proxy too.

Location, time zone or language "inconsistent"#

Location services use different databases, and they disagree more often than people think: one may place an Italian address in London while three others say Milan. SablePower sets the profile from the answer of its own check. A checker using a database that disagrees then calls the time zone or the language "inconsistent", or "spoofed", because it compares them with its own idea of the address.

• Look at what the services say: Check proxy shows the place and which service answered, and the profile's start page shows the place too. If most services agree with the profile, the profile is right and the checker's database is the odd one out.
• If the profile shows UTC or US English on a proxy in another country, that is a real problem: see above.
• To satisfy one checker anyway, set the time zone by hand. Do not chase a single checker's database on a working account.

"Masking" or "noise" detected on canvas#

With Canvas set to Noise, the default, every profile draws its own slightly different canvas and WebGL image, so profiles on one computer cannot be linked by them. Checkers like Pixelscan can see that the image is noised. That is the trade. Real shows no masking, but every profile set to Real on the same computer then shows the same canvas: right for one account per computer, wrong for many. Do not switch an account that is already trusted: its fingerprint changes. See Canvas.

A lower score with a device of the other system#

A Windows device on a Mac, or a Mac device on Windows, gives itself away through the computer's built in speech voices, which no setting can change. BrowserScan's authenticity score drops for it. Use a device of your own computer's system; SablePower offers it when you open the profile window.

A profile is in use on another computer#

The row says In use with a person and a computer, and there is no Open button. A team profile can be open on one computer at a time on purpose: one account seen from two addresses in the same second is a fast way to lose it.

1. Ask them to close it. Closing saves their session to the team, and then it opens for you, logged in.
2. They left it open and went home? An owner or admin presses Ask to close on the row: their SablePower closes it, saves it, and it opens for the one who asked.
3. Their computer crashed, slept or lost the internet? The row says Not answering, and an owner or admin can Take over. Otherwise the hold ends by itself about a minute and a half after their SablePower stops answering. Wait, then press Refresh.

All of it in One person at a time.

"This profile is a Mac device, and this computer runs Windows"#

The profile's device is another system than your computer, which sites can notice through the computer's speech voices. Open it on a computer of its system, or ask the owner to change its device (why and how). Open anyway opens it, and the team's log records it. If the team has Block opening a profile on a computer with a different system on, it is refused instead.

"The page says not working"#

When a site inside a profile shows an error, a blank page or "not working":

1. Look at the profile's start page tab. No exit IP there means the proxy is down: check it.
2. Reload the page, or open it in a new tab.
3. A page saying "… is blocked in this profile" is a domain list; on https sites a list shows as ERR_TUNNEL_CONNECTION_FAILED. Ask the owner.
4. The site may refuse the proxy's address, or ask for endless captchas. Try the site in a profile with another proxy.
5. Clear the cache: the row's More menu, Extensions & disk, Clear cache. The login stays.
6. A recently added extension can break a site: remove it in the same window and try again.
7. If a bar says Update the browser, update: sites sometimes stop working on an old browser.

Still not working? Send us the site's address, a screenshot, the profile's name and the time, and the log.

Other messages#

Send us the log#

Settings, About tab: Log shows where SablePower's log file is on this computer. It lists what SablePower did, on this computer only; nothing is sent anywhere by itself. Attach that file when you tell us about a problem, with a screenshot and the time it happened. You may delete it whenever you like; a new one starts by itself.