IP/DNS Detect

What are WebRTC leaks?

WebRTC can use STUN (Session Traversal Utilities for NAT) to learn your public IP. A VPN leak is when that public IP is your ISP address while you expect the VPN exit. Chromium browsers often hide the LAN address behind an mDNS name ending in .local — that is not a public leak by itself. An old browser tab can keep a pre-VPN address; test again in a new tab after connecting.

What are DNS leaks?

In this context, a DNS leak means name lookups leave the VPN tunnel. The resolvers listed above are the ones that answered our probes. If you are on a VPN and you see your ISP (or another unexpected) resolver there, DNS is not confined to the tunnel.

Why does my system leak DNS queries?

On Windows, each network interface can have its own DNS. The system process svchost.exe may send queries that ignore the VPN default gateway — a classic cause. Other common causes today: Browser DNS-over-HTTPS / DNS-over-TLS (Chrome, Firefox, and others) resolving outside the system VPN path. Per-app DNS (Android Private DNS, some apps with their own resolver, split tunneling).

Should I be worried about a DNS leak?

If you do not want your ISP, or anyone who can monitor that path, to see which names your system resolves (and therefore which sites you visit), you must stop DNS leaks. In a hostile jurisdiction, or if that knowledge could harm you, fix it before you rely on the VPN alone.

How does torrent detection work?

To detect data from your torrent client we provide a magnet link to a fake file. The magnet contains an HTTP URL of a tracker we control, which records what the torrent client sends.