Cause of Hidden Leaks
When you click a link, your browser must resolve the exact node IP address via the Domain Name System (DNS). If the tunnel client fails to intercept system requests at the socket level or your router forces its own addresses, the operating system sends plaintext requests to your local ISP.
How to Check and Fix Leaks
- Test your connection on specialized DNS Leak testing sites
- Enable mandatory redirection of all DNS requests through the secure gateway in your client
- Configure independent DoH-supported addresses in your network connection properties
- Disable IPv6 support in your adapter settings if it lacks proper routing inside the tunnel