IPdidi
English

DNS leak test

Every time you open a site, your device asks a DNS server for its address. This test makes your browser look up a few random names that only our server can answer, then shows which DNS servers asked for them and where they are.

Result

Checking…

Your connection: Checking…

Run the full browser fingerprint test

DNS servers that handled your lookups

Some DNS servers pass along part of the address that asked them, so sites can pick a nearby server. This client subnet can point to your real network even when the DNS server is somewhere else. A dash means none was sent.

IP geolocation by DB-IP

What a DNS leak is

DNS turns a site name into an address. Whoever answers those lookups sees the name of every site you open, even when the pages themselves are encrypted.

A DNS leak means the lookups go to a server outside your VPN or proxy, usually your internet provider's. Your traffic exits in one place while your lookups reveal your real network.

Why VPNs and proxies leak DNS

A VPN only protects DNS if it also takes over your device's DNS settings. If the system keeps using your router's or provider's DNS server, lookups go around the tunnel.

Proxy clients work per connection. A browser on a system proxy usually sends the site name to the proxy, but a rule-based client such as Clash may still look names up itself to match IP and country rules, using the DNS servers in its config. Apps that ignore the system proxy resolve names on their own.

If you turned on secure DNS in your browser, lookups go to the provider you chose, and that provider shows up here.

How to fix a DNS leak

Guides