This is a comparison, not an automatic leak verdict
The site exit comes from an HTTP request. WebRTC candidates are observed while the browser reaches reviewed STUN endpoints. Proxy software, browser policy, and dual-stack routing can make them differ, and one address difference alone does not prove an IP leak.