Result
Checking…
Your connection: Checking…
DNS servers that handled your lookups
| DNS server | Country | Network | Client subnet |
|---|
No DNS servers to show.
Some DNS servers pass along part of the address that asked them, so sites can pick a nearby server. This client subnet can point to your real network even when the DNS server is somewhere else. A dash means none was sent.
IP geolocation by DB-IP
What a DNS leak is
DNS turns a site name into an address. Whoever answers those lookups sees the name of every site you open, even when the pages themselves are encrypted.
A DNS leak means the lookups go to a server outside your VPN or proxy, usually your internet provider's. Your traffic exits in one place while your lookups reveal your real network.
Why VPNs and proxies leak DNS
A VPN only protects DNS if it also takes over your device's DNS settings. If the system keeps using your router's or provider's DNS server, lookups go around the tunnel.
Proxy clients work per connection. A browser on a system proxy usually sends the site name to the proxy, but a rule-based client such as Clash may still look names up itself to match IP and country rules, using the DNS servers in its config. Apps that ignore the system proxy resolve names on their own.
If you turned on secure DNS in your browser, lookups go to the provider you chose, and that provider shows up here.
How to fix a DNS leak
- In a VPN app, turn on DNS leak protection and the kill switch so only the VPN's own DNS servers are used.
- In Clash and similar clients, use TUN mode with fake-IP so lookups are answered inside the client and resolved on the proxy server. Set its DNS servers to encrypted DNS, and add no-resolve to IP rules that don't need a local lookup.
- To keep your internet provider out of your lookups without a VPN, turn on secure DNS (DNS over HTTPS) in your browser or system settings.
- Run this test again after each change.
Guides
- What is a DNS leak and how do you fix it?
Even with a VPN on, your device may still ask your internet provider for every website you visit. That's a DNS leak. Here's how to spot one and stop it.
- What is an IP address?
An IP address is the number that tells the internet where to send data meant for you. Here's what it looks like, the different kinds, and what yours says about you.
- How to find your IP address
Your public IP takes one click to find. Your private IP depends on the device. Here are the exact steps for each.
- IPv4 vs IPv6: what's the difference?
IPv6 replaces IPv4 because the world ran out of addresses. Here's how the two compare, how to tell which you're using, and why IPv6 matters if you use a VPN.