DNS Leak Test
Incorrect network configurations or faulty VPN/proxy software can cause your device to send DNS requests directly to your ISP's server, allowing your ISP or third parties to monitor your online activity.
The DNS Leak Test is a tool that determines which DNS servers your browser uses to resolve domain names. This test attempts to resolve 50 randomly generated domain names, of which 25 are IPv4-only and 25 are IPv6-only.
Your IP Address
| IP Address | |
| ISP | — |
| Location | — |
DNS Leak Test
| Test Results |
Test not started
—
|
||||||||
| Your DNS Servers |
|
||||||||
DNS Leak Test — FAQ
Quick answers to the most common questions about this tool.
What is a DNS leak?
A DNS leak occurs when your DNS queries bypass the VPN tunnel and reach your ISP's resolver instead. When this happens, your ISP can still see which sites you are visiting even if your traffic is encrypted.
How does this DNS leak test work?
The test resolves dozens of unique random subdomains. Each query triggers a separate DNS request, and the answering resolver is recorded. Same method used by dnsleaktest.com and BrowserLeaks.
What is DoH and DoT?
DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT) are encrypted DNS protocols. They prevent your ISP from snooping on or modifying your DNS queries.
I see multiple resolvers — is that a leak?
Not necessarily. Many VPNs route through a load-balanced pool of resolvers (e.g. Cloudflare 1.1.1.1 and 1.0.0.1). It is a leak only if you see your ISP's resolver in the list.