DNS泄漏测试

When you visit a website, your browser needs to convert the domain name (like "google.com") into an IP address. This is called a DNS query, and it's handled by a DNS resolver — usually your ISP's server.

If you're using a VPN, your DNS queries should go through the VPN's DNS servers, not your ISP's. A DNS leak happens when some or all DNS queries bypass the VPN tunnel and reach your ISP's DNS resolver instead.

This test works by making DNS requests and checking which resolvers process them. If the resolvers belong to your ISP rather than your VPN provider, you have a DNS leak.

DNS leaks are one of the most common ways VPN users unknowingly expose their browsing activity. Even with an encrypted VPN tunnel, a DNS leak reveals:

• Every website you visit — your ISP can see the domain names in your DNS queries
• When you visit them — DNS queries include timestamps
• Your real location — your ISP's DNS server is usually in your region

In some countries, ISPs are legally required to log DNS queries and share them with authorities. In others, ISPs sell browsing data to advertisers. A DNS leak makes your VPN effectively useless for privacy.

1. Use a VPN with built-in DNS leak protection. Most reputable VPNs (NordVPN, Surfshark, ProtonVPN) force all DNS queries through their own servers.

2. Manually set your DNS servers. Configure your OS to use privacy-focused DNS resolvers:

• Cloudflare: 1.1.1.1 / 1.0.0.1
• Google: 8.8.8.8 / 8.8.4.4
• Quad9: 9.9.9.9 / 149.112.112.112

3. Use DNS-over-HTTPS (DoH) or DNS-over-TLS (DoT). These encrypt your DNS queries, preventing ISP interception even without a VPN.

4. Disable WebRTC. WebRTC can also leak your IP. Run our WebRTC Leak Test to check.