DNS leak test
See who actually answers your domain lookups (DNS). With a VPN or proxy on, if DNS doesn’t go through it, the local network can still see which sites you visit.
How it works
Your browser requests about 20 random test names (*.leak.cellglide.com). Our server is their authoritative DNS, so it sees which DNS servers ask for them, and looks up their network and region with DB-IP data. Results are deleted after 5 minutes.
Your browser may differ from your system
Chrome, Firefox and other browsers can turn on their own secure DNS. This page then tests the browser’s setting, while other apps still use the system DNS. To test your Mac’s system DNS, use the DNS leak test in the CellGlide Mac client’s menu bar panel.
Questions
What is a DNS leak?
Before opening a site, your computer looks up its address through DNS. With a VPN or proxy on, those lookups should go through it too. If they still go to your local network or ISP’s DNS, they can see which sites you visit. That’s a DNS leak.
The test says DNS isn’t going through my exit network. What now?
Turn on your VPN or proxy app’s DNS leak protection, or its “use VPN DNS” option, remove any DNS set by hand on your computer or router, and test again. If your browser has secure DNS on, check which provider it uses as well.
Is it normal to see Google or Cloudflare DNS?
Yes. It means you use a public DNS service rather than your current network’s ISP. Unless you’re on a VPN that should handle DNS itself, that’s not a leak.
What does “Passed on your subnet” mean?
Some DNS services tell a site’s DNS the first part of your address (EDNS Client Subnet), so the site can answer with a server near you. It doesn’t reveal your full IP, but it shows roughly which network you’re on.
What does the test record?
The server only sees the DNS servers that ask for the test names, any subnet they pass on, and your public IP when you fetch the result. It uses them only to show this result and deletes them after 5 minutes. It doesn’t record which sites you visit.