Confirm the expected DNS route
DNS resolves domain names to network addresses. If DNS queries should follow your client’s proxy rules, check the client’s DNS, system proxy, and tunnel settings, and confirm its current mode. With system proxy enabled alone, some apps may handle DNS outside those rules.
Compare browser and system settings
Check whether your browser uses its own Secure DNS setting and whether your system specifies a different DNS resolver. Browser settings, system settings, and client rules may all apply at once. Note the original settings before making changes, and follow your client’s instructions to avoid changing multiple things at once and making the cause harder to find.
Check logs, not just locations
If your client provides DNS or connection logs, visit the domain you want to check and see which rules match the DNS query and the subsequent connection. A difference between the DNS resolver’s location and your public IP’s location doesn’t necessarily indicate a leak. Check whether DNS queries are using the intended route.
Keep troubleshooting details if the cause is unclear
Note your platform, client mode, domain, and the issue you’re seeing, then submit a ticket through the user portal. Don’t include full subscription URLs, access credentials, or other account details in screenshots shared publicly. This page does not present an IP lookup as a DNS security test.