Proxy troubleshooting

Fix DNS leak detected

Ranked causes, ordered diagnostics, and a verified remedy for dns leak detected - ending with a final connection check.

Quick answer

Fix: DNS queries bypass the SOCKS proxy. Confirm endpoint values, test with curl through the endpoint, apply the matched remedy, then re-verify the exit IP is your assigned endpoint.

Exact symptom text
Causes ranked by likelihood
Ordered diagnostics
Final connection check

When this is the right fit

  • Exact symptom text
  • Causes ranked by likelihood
  • Ordered diagnostics

Who this page is for

Ranked causes, ordered diagnostics, and a verified remedy for dns leak detected - ending with a final connection check.

Fix: DNS queries bypass the SOCKS proxy. Confirm endpoint values, test with curl through the endpoint, apply the matched remedy, then re-verify the exit IP is your assigned endpoint.

Diagnosis tree

Leak test shows your ISP resolver

Likely causes

  • - Client resolves DNS locally over UDP 53
  • - Browser uses system DNS with a SOCKS4-style setup

Verified remedy

Use SOCKS5 with remote DNS (--socks5-hostname in curl; remote DNS in the browser profile) and retest.

Leak appears only for some domains

Likely causes

  • - Browser prefetch or WebRTC旁 paths
  • - Cached old resolver results

Verified remedy

Clear the DNS cache, disable prefetch, and rerun the leak test twice.

Final connection check

  1. 1Apply the matched remedy
  2. 2Test the endpoint with curl
  3. 3Repeat the original action
  4. 4Confirm the exit IP is the assigned endpoint

Working connection

The action completes and the exit IP matches the endpoint.

Broken connection

If curl also fails, the endpoint is unhealthy: swap to a spare.

Sources

Facts last reviewed 2026-09-01.

Prevent it recurring

Remote DNS resolution through the endpoint keeps domain lookups inside the same identity as page requests.

195+ countries
99.9% uptime guarantee
Unlimited bandwidth
4.9/5 from 127 ratings

Frequently asked questions

How do I fix DNS leak detected?

Work the diagnosis tree top to bottom, confirm endpoint values, test with curl, then run the final connection check.

Choose one stable proxy for every active profile

Buy self-serve now, or talk with us about a larger agency inventory.