DNS resolution path
How to check for a DNS leak
Your public IP and DNS are two separate clues. The GeoIP result on this page cannot directly show which DNS resolvers the device is using, so check your system’s network details as well.
If web traffic is already leaving through the target region but domain lookups are still handled by the original access network, websites or the network provider may see a DNS source that does not match the exit region. This is commonly related to system DNS settings, browser secure DNS, router configuration or client split-routing rules.
Check the exit first
Refresh the network check
Reconnect to the target route and run the check again. Confirm that the public IP, location and ISP have changed as expected. If the exit itself is unchanged, troubleshoot the client connection or split-routing settings first.
Then review DNS settings
Check your system and browser
Open your device’s network details and review the DNS source. Also check whether the browser has Secure DNS enabled separately. Your system, browser and router may each use a different resolution path.
Finally, compare the sources
Compare the exit and DNS sources
If DNS resolution still clearly comes from the original access network while the exit has changed, enable the relevant DNS handling option in the client and review split-routing rules. Reconnect after making changes, then repeat the same checks.