Security Diagnostic Tool
DNS Leak Test
Detects whether your DNS queries are leaking outside your proxy or VPN tunnel — exposing your real ISP and location to every site you visit.
Your Current IP Address
Waiting for scan…
—
What Is a DNS Leak?
How DNS Works
Every time you visit a website, your device sends a DNS query to translate the domain name into an IP address. These queries normally go through your ISP’s servers — exposing your browsing activity to your provider.
When a Leak Occurs
A DNS leak happens when you are using a proxy or VPN but your DNS queries still travel through your ISP’s servers outside the protected tunnel. Your IP may be masked, but your ISP can still see every domain you look up.
No Leak = Protected
If this test shows only DNS resolvers belonging to your VPN provider — and not your ISP — your DNS traffic is properly tunnelled and protected from surveillance.
Frequently Asked Questions
How does this DNS leak test work?+
This tool queries multiple DNS-over-HTTPS (DoH) resolvers from your browser and checks which DNS servers respond. It geolocates those resolver IPs and compares their ISP against your actual ISP. If a resolver belongs to your real ISP, it indicates your DNS is not being tunnelled through your proxy or VPN.
My VPN is on but the test shows my ISP’s DNS. What does that mean?+
It means your VPN is not properly routing DNS queries through its tunnel. Your IP address may be hidden, but every domain lookup still goes through your ISP’s servers. Enable “DNS leak protection” in your VPN settings, or use a VPN that forces all DNS through its own resolvers.
Does a web proxy like BlockAway prevent DNS leaks?+
No. A web proxy routes URL requests through its servers but does not control your device’s DNS resolution. Your DNS queries are still handled by your operating system using its configured servers — usually your ISP’s. For complete DNS leak prevention, a system-level VPN with DNS leak protection enabled is required.
What should I see if I have no DNS leak?+
All resolver responses should show ISPs and locations matching your VPN provider — not your real ISP. Seeing servers from Cloudflare (1.1.1.1), Google (8.8.8.8), or your VPN provider’s infrastructure is a sign of no leak.
How do I fix a DNS leak?+
Enable DNS leak protection in your VPN app settings — most premium VPNs have this as a toggle. Alternatively, manually configure your DNS to use Cloudflare (1.1.1.1) or Google (8.8.8.8). On Windows, disabling Teredo tunnelling also prevents a common source of DNS leaks.
