Browse tools

DNS Leak Checker

Every website you visit starts with a DNS lookup. This test shows whose servers are answering yours, and therefore who can see where you go online.

Your connection

IP address
216.73.216.145
Provider
Amazon.com, Inc. AS16509
Country
United States

Run the test

The standard test takes about 5 seconds. The extended test makes more lookups and catches resolvers that only answer occasionally.

Are your lookups encrypted?

No website can see the hop between your device and your DNS server, so check your own settings. If Secure DNS is on, your internet provider can't read your lookups.

  • Chrome and Edge: Settings, Privacy and security, Security, "Use secure DNS".
  • Firefox: Settings, Privacy & Security, "DNS over HTTPS". Type about:networking#dns in the address bar: a "true" in the TRR column means a lookup was encrypted.
  • Windows 11: Settings, Network & internet, your connection, DNS server assignment, Edit, then "Encrypted only (DNS over HTTPS)".
  • Android: Settings, Network, Private DNS, then enter a provider such as dns.google or one.one.one.one. iPhone: use your VPN's or DNS provider's app.

Even with encrypted DNS, your provider can still see which servers you connect to, and usually the website name in the connection set-up (SNI). A trustworthy VPN hides both.

How the test works

Your browser looks up a handful of random, never-used hostnames under a domain whose nameserver we run. Because nobody has looked them up before, your DNS resolver has to ask our nameserver directly, and we record which resolver asked. That reveals the real DNS servers your device uses, not just what your settings say.

Reading the result

  • On a VPN? You should only see your VPN provider's servers, or a public resolver you chose. Seeing your home internet provider means a DNS leak.
  • Not on a VPN? Seeing your provider's servers is normal; they can see the sites you look up. Switching to encrypted DNS (DNS over HTTPS) in your browser hides that.
  • Big public resolvers like Google and Cloudflare often show several addresses. That's load balancing, not a problem.
How do I fix a DNS leak?

Turn on your VPN's DNS leak protection or "use VPN DNS" option, disable IPv6 if your VPN doesn't support it, and turn on Secure DNS (DNS over HTTPS) in your browser settings.

Does this test see the sites I visit?

No. It only sees the lookups for our own random test hostnames, and results are deleted after a day.

More free tools