DNS leak & connectivity test
Check which encrypted DNS providers your network can reach right now, and how fast. This page makes direct DNS-over-HTTPS queries from your browser to several well-known resolvers and measures the response.
What this test does: queries each provider's DoH endpoint for a fresh, unique domain name (cache-busted) and measures the round trip. If a provider responds, your network can reach encrypted DNS at that provider. Latency is a rough proxy for whether you're already routing through that provider, but it's noisy.
What this test does NOT do: see your operating system's default DNS resolver. Browsers don't expose that to JavaScript. To detect whether your system resolver leaks past a VPN, use a full leak test like dnsleaktest.com — they run server-side authoritative DNS to capture the resolver behind the query, which we can't do for free on Cloudflare's edge.
If a leak is what worries you: a quality VPN routes all DNS through its own encrypted resolver, eliminating the leak class entirely. See our recommended VPNs — Proton VPN and Mullvad both handle this by default.