DNS resolver exposure

See the DNS resolvers observed during a short test, then compare them with the provider you expect to use.

Measure your current DNS path

Connect to the VPN or DNS service you want to check, then start the test.

This test uses the external bash.ws measurement service. Starting it sends eight test requests to that service, which observes resolver addresses and may receive your browser connection. Test results describe this browser’s DNS path at this moment.

Observed resolvers

Multiple resolvers can be normal. An unfamiliar address alone does not prove a VPN leak, and an empty result does not prove privacy.

Compare observed resolvers with your expected provider

A DNS resolver translates website names into addresses. During this test, unique hostnames cause DNS queries that the measurement service can observe. The result lists the resolver addresses it saw.

Secure DNS settings inside a browser can differ from system or VPN settings. Some providers also use multiple resolver networks. Check unfamiliar addresses against your provider’s own documentation rather than relying on a simple pass/fail label.

This site obtains the observations through its server and discards the local random test ticket after reading the result or after two minutes. The external service has its own operation and retention policy. No DNS measurement is started when this page first loads.