Back to Blog

How to Check Proxies for DNS Leaks and Protect Accounts from De-Anonymization: Complete Guide

DNS leaks reveal your real IP even when using a proxy. Learn how to check for proxy leaks and protect your accounts from bans.

📅February 19, 2026
```html

Are you using a proxy for working with Facebook Ads, managing client Instagram accounts, or scraping marketplaces, but suddenly getting banned? One of the main reasons is a DNS leak, which reveals your real IP address even when connected through a proxy. In this article, we will discuss how to check a proxy for DNS leaks in 2 minutes and set up protection in anti-detect browsers.

A DNS leak is a situation where your browser or application sends DNS requests through your provider, bypassing the proxy server. As a result, the target site (Facebook, Instagram, Wildberries) sees your real IP and can link all the accounts you manage.

What is a DNS Leak and Why is it Dangerous

DNS (Domain Name System) is a system that translates domain names (e.g., facebook.com) into IP addresses. When you open a website, your browser first sends a DNS request to find out the server's IP address. Usually, this request is handled by your internet provider's DNS server.

When using a proxy, all requests should go through the proxy server, including DNS requests. But in practice, many browsers and applications ignore proxy settings for DNS and continue to send requests directly to the provider. This is what a DNS leak is.

Real Example: An arbitrageur launches 10 Facebook Ads accounts through different proxies and profiles in Dolphin Anty. But due to a DNS leak, all accounts send DNS requests from one IP provider. Facebook links the accounts and issues a chain ban on all 10 accounts simultaneously.

The Dangers of DNS Leaks for Different Tasks

Task Risk of DNS Leak
Facebook Ads Multi-Accounting Chain ban of all ad accounts linked through one DNS server
Managing Client Instagram Accounts Account blocking for suspicious activity from one IP
Scraping Wildberries or Ozon IP ban from the provider, proxies become useless
Posting Ads on Avito Linking all ads, limiting postings
Working with TikTok Ads De-anonymization, banning ad accounts for rule violations

A DNS leak is especially critical when working with residential proxies — you pay for IPs of real users from the required geolocation, but due to the leak, the site sees your real address in a different country or city. This instantly raises suspicions with the anti-fraud systems of Facebook, Instagram, and other platforms.

When to Check a Proxy for Leaks

Checking a proxy for DNS leaks is not a one-time procedure. There are situations when checking is mandatory, even if everything worked fine before.

Mandatory Cases for Checking

  • First connection of a new proxy — even if the provider guarantees no leaks, check it yourself. The issue may be on your browser or operating system's side.
  • Setting up a new profile in an anti-detect browser — each profile in Dolphin Anty, AdsPower, or Multilogin needs to be checked separately. Settings may differ between profiles.
  • After updating the browser or operating system — updates may reset DNS settings or add new features that bypass the proxy (e.g., DNS over HTTPS in Chrome).
  • When changing the proxy provider — different providers use different protocols and settings. What worked with one may leak with another.
  • Before launching an ad campaign with a new budget — check all accounts before pouring money into Facebook Ads or TikTok Ads. A ban during an active campaign = loss of budget.
  • When moving or changing internet providers — a new provider may use an aggressive DNS server that intercepts requests.

💡 Tip for SMM Specialists

If you manage client accounts on Instagram or TikTok, create a checklist for checking each new account. Include DNS, WebRTC, timezone, and browser language checks. This will take 3 minutes but can save you from losing a client's account.

How Often to Check Active Proxies

Even if the proxy works without issues, periodic checks are necessary:

  • Once a week — for critical tasks (traffic arbitrage, working with expensive accounts)
  • Once a month — for routine tasks (scraping, price monitoring)
  • After any technical issues — connection drops, slow performance, strange website behavior

Checking via Online Services: 5 Best Tools

The simplest way to check a proxy for DNS leaks is to use specialized online services. They show what IP address and DNS servers the site sees when connected through your proxy.

1. DNSLeakTest.com — The Most Popular Service

This is a classic tool for checking DNS leaks used by arbitrageurs and SMM specialists worldwide.

How to Check:

  1. Connect to the proxy in your browser or anti-detect browser (Dolphin Anty, AdsPower, GoLogin)
  2. Open the site dnsleaktest.com
  3. Click the "Standard test" button for a quick check or "Extended test" for a detailed analysis
  4. Wait for the results (5-10 seconds)

How to Read the Results:

  • ✅ No Leak: The table shows DNS servers that belong to your proxy provider or are located in the same country as the proxy IP
  • ❌ Leak Detected: The table shows DNS servers of your internet provider (usually with the provider's name or your city)

Important: If you are using a proxy from the USA, and the DNS servers show your provider from Russia — this is a 100% leak. Facebook and Instagram will immediately detect the discrepancy.

2. BrowserLeaks.com — Comprehensive Check

This service checks not only DNS but also other parameters that can de-anonymize you: WebRTC, Canvas fingerprint, timezone, browser languages.

What to Check:

  • "IP Address" section — shows your IP and geolocation
  • "DNS Leak Test" section — checks DNS servers
  • "WebRTC Leak Test" section — real IP leak through WebRTC (critical for video calls and some websites)

BrowserLeaks is especially useful when setting up profiles in anti-detect browsers — you can immediately see all parameters that might expose you.

3. IPLeak.net — Simple and Fast

A minimalist service that shows IP, DNS, and torrent IP (if you use torrents through a proxy). The check occurs automatically upon opening the page.

Advantage: No need to press buttons — just open the site and see the result. Convenient for a quick check before starting work.

4. WhoER.net — With Anonymity Check

WhoER shows not only technical parameters but also the level of anonymity on a 100-point scale. It takes into account DNS, WebRTC, browser headers, Flash, Java, and other factors.

How to Interpret the Score:

  • 90-100 points: Excellent anonymity, no leaks
  • 70-89 points: Good, but there are minor leaks (e.g., timezone does not match IP)
  • Below 70: Serious anonymity issues, requires fixing

5. Perfect-Privacy.com — Detailed Analysis

A service from a VPN provider, but it works great for checking proxies as well. It shows detailed information about DNS servers, their owners, and geographical locations.

Feature: It shows not only the IPs of DNS servers but also their owners (ISPs). This helps to understand who owns the servers — your proxy provider or your home internet provider.

Comparison of Checking Services

Service Speed Detail For Whom
DNSLeakTest Fast (5-10 sec) Average All tasks
BrowserLeaks Medium (15-20 sec) Very High Multi-Accounting
IPLeak Instantly Basic Quick Check
WhoER Fast (5 sec) High Beginners
Perfect-Privacy Medium (10-15 sec) Very High Professionals

DNS Check in Anti-Detect Browsers

If you work with multi-accounting in Facebook Ads, Instagram, or other platforms, you use anti-detect browsers: Dolphin Anty, AdsPower, Multilogin, GoLogin, or Octo Browser. Each browser has built-in checking tools, but they are not always reliable.

Checking in Dolphin Anty

Dolphin Anty is a popular anti-detect browser among arbitrageurs. It has built-in IP and DNS checks.

Step-by-step Instructions:

  1. Create a profile and set up the proxy (HTTP, SOCKS5, or mobile)
  2. In the profile card, click "Check Proxy"
  3. Dolphin will show the IP, country, and proxy status
  4. Launch the profile and open any DNS checking service (DNSLeakTest or BrowserLeaks)
  5. Compare the results: IP from Dolphin and DNS from the service should be from the same country/region

💡 Important Detail

The built-in check in Dolphin Anty shows only the proxy IP but does NOT check DNS. Be sure to use external services for a complete check.

Checking in AdsPower

AdsPower offers a more detailed built-in check, but it does not replace external services.

How to Check:

  1. Open profile settings → "Proxy" tab
  2. Enter proxy details and click "Check Proxy"
  3. AdsPower will show the IP, geolocation, speed, and status
  4. Launch the profile and check DNS through BrowserLeaks (DNS Leak Test section)

AdsPower also shows the type of proxy (residential, data center, mobile), which helps ensure the settings are correct.

Checking in Multilogin and GoLogin

These browsers work similarly: the built-in check shows the IP and basic parameters, but to check DNS, you need to use external services after launching the profile.

Universal Algorithm for Any Anti-Detect Browser:

  1. Set up the proxy in the profile
  2. Use the built-in check to confirm the connection
  3. Launch the profile
  4. Open DNSLeakTest.com and run the Extended test
  5. Open BrowserLeaks.com → WebRTC Leak Test (check for leaks via WebRTC)
  6. Save screenshots of the results for documentation

How to Fix a DNS Leak: 4 Methods

If the check shows a DNS leak, don't panic. There are several ways to fix the problem — from simple browser settings to changing the type of proxy.

Method 1: Disable DNS over HTTPS in the Browser

Modern browsers (Chrome, Firefox, Edge) use DNS over HTTPS (DoH) technology, which encrypts DNS requests and sends them through Google or Cloudflare, bypassing the proxy. This needs to be disabled.

For Google Chrome and anti-detect browsers based on Chromium:

  1. Open browser settings (three dots → Settings)
  2. Go to "Privacy and security"
  3. Find "Use secure DNS"
  4. Disable this option (toggle to OFF)
  5. Restart the browser

For Firefox:

  1. Open settings (three lines → Settings)
  2. Go to "Privacy & Security"
  3. Scroll to "DNS over HTTPS"
  4. Select "Off" or "Default" (depends on the version)

Method 2: Use SOCKS5 Instead of HTTP Proxy

HTTP proxies only work with web traffic and often bypass DNS requests. SOCKS5 proxies operate at a lower level and intercept all requests, including DNS.

If your proxy provider supports both protocols, switch to SOCKS5:

  • In the anti-detect browser profile settings, select "SOCKS5" type
  • Enter the same proxy details (IP, port, username, password)
  • Save and restart the profile
  • Check DNS through DNSLeakTest

Most mobile proxies and residential proxies support SOCKS5 — check with your provider.

Method 3: Manually Configure System DNS

If the browser continues to use the provider's DNS, you can change the system DNS settings to public servers that do not reveal your geolocation.

For Windows:

  1. Open "Network and Internet settings"
  2. Select the active connection → "Properties"
  3. Click "Edit" in the "DNS server assignment" section
  4. Select "Manual" and enter public DNS (e.g., Cloudflare: 1.1.1.1 and 1.0.0.1)
  5. Save changes

For macOS:

  1. System Preferences → Network
  2. Select the active connection → "Advanced"
  3. DNS tab
  4. Add public DNS (1.1.1.1, 8.8.8.8)
  5. Click OK and "Apply"

Attention: This method does NOT completely solve the problem. If the proxy does not support DNS proxying, requests will still go through public servers, which may raise suspicions (e.g., IP from the USA, but DNS from Cloudflare).

Method 4: Change to a More Reliable Proxy Provider

If none of the methods work, the problem lies with the proxy server itself. Cheap proxy providers often do not configure DNS proxying correctly.

Signs of a Problematic Provider:

  • DNS leak persists even when using SOCKS5
  • The provider cannot explain how DNS is configured on their servers
  • Frequent connection drops or slow performance
  • Lack of technical support or slow responses

When choosing a new provider, pay attention to:

  • SOCKS5 Support — a mandatory requirement for safe operation
  • Own DNS Servers — the provider should explicitly state that DNS requests go through their infrastructure
  • Reviews from Arbitrageurs and SMM Specialists — look for discussions on specialized forums
  • Testing Opportunity — good providers offer a trial period or money-back guarantee

Common Mistakes When Checking Proxies

Even experienced arbitrageurs and SMM specialists make mistakes when checking proxies for leaks. Let's discuss the most common ones.

Mistake 1: Checking Only with Built-in Tools of the Anti-Detect Browser

Dolphin Anty, AdsPower, and other browsers show that the proxy is connected and the IP is correct. But this does NOT mean that DNS is not leaking. Built-in checks often ignore DNS requests.

Solution: Always use external services (DNSLeakTest, BrowserLeaks) after launching the profile.

Mistake 2: Checking DNS Without Connecting to the Proxy

Some users open DNSLeakTest in a regular browser without a proxy to "see how the service works." This is pointless — you will see your provider's DNS, which is normal for a regular connection.

Solution: Check only after connecting to the proxy in an anti-detect browser or setting the proxy in the system.

Mistake 3: Ignoring WebRTC Leaks

WebRTC is a technology for video calls in the browser. It can reveal your real IP even when using a proxy. Many check only DNS and overlook WebRTC.

Solution: Check WebRTC through BrowserLeaks.com → WebRTC Leak Test. Anti-detect browsers usually have a "Disable WebRTC" setting — enable it.

Mistake 4: Using Free or Cheap Proxies for Critical Tasks

Free proxies and services for $2-5 a month almost always have DNS leaks, slow speeds, and are used by thousands of other users. For Facebook Ads, Instagram, or TikTok, this guarantees a ban.

Solution: For multi-accounting and arbitrage, use quality residential or mobile proxies from trusted providers. Saving $10-20 a month could cost you accounts worth thousands of dollars.

Mistake 5: Not Checking Each Profile Separately

If you have 10 profiles in Dolphin Anty with different proxies, you cannot check one profile and assume the others work the same. Each profile may have its own settings and issues.

Solution: Create a checklist and check each new profile before use. For active profiles — selective checks once a week.

Leak Prevention: Settings Checklist

It is better to prevent a DNS leak than to fix the consequences of a ban. Here is a settings checklist that should be completed before starting work with a proxy.

Checklist for Anti-Detect Browser (Dolphin Anty, AdsPower, GoLogin)

  1. Proxy Type: Choose SOCKS5 instead of HTTP (if the provider supports it)
  2. DNS over HTTPS: Disable in browser settings (Privacy and Security → Use secure DNS → OFF)
  3. WebRTC: Disable or set "Use proxy IP" mode in profile settings
  4. Geolocation: Set the geolocation corresponding to the proxy IP (e.g., for an IP from New York, select New York coordinates)
  5. Timezone: Set the timezone of the country/city of the proxy (for US proxies — American timezone)
  6. Browser Language: Set the language corresponding to the proxy's geolocation (for the USA — English (United States))
  7. Check After Setup: Launch profile → open DNSLeakTest → Extended test → check BrowserLeaks (WebRTC, Canvas, Timezone)
  8. Documentation: Take a screenshot of the check results and save it in the profile folder

Checklist for Choosing a Proxy Provider

Before purchasing a proxy, ask the provider these questions:

  • ✅ Do you support the SOCKS5 protocol?
  • ✅ Do you have your own DNS servers or do you use third-party ones?
  • ✅ Are DNS requests proxied through your servers?
  • ✅ Can I test the proxy before purchasing?
  • ✅ What is your refund policy if the proxies are unsuitable?
  • ✅ Do you have experience working with clients from arbitrage/SMM/e-commerce?

If the provider cannot answer these questions or responds evasively — this is a red flag.

Regular Checks: Schedule for Different Tasks

Task Check Frequency What to Check
Facebook Ads Arbitrage Before each campaign launch DNS, WebRTC, IP, geolocation
SMM of Client Accounts Once a week DNS, IP, timezone
Scraping Marketplaces Once a month DNS, speed, IP
Posting Ads on Avito Before mass posting DNS, city geolocation
TikTok Ads Arbitrage Daily (first week), then every 3 days DNS, WebRTC, Canvas fingerprint

Automation of Checks

If you have dozens of profiles, checking each one manually takes a long time. You can partially automate the process:

  • Create a bookmark for DNSLeakTest: Bookmark the direct link to the Extended test. When launching a profile, immediately open the bookmark.
  • Use screenshot extensions: Install an extension for automatic screenshots of pages (e.g., Fireshot). Save the check results to the cloud.
  • Profile Tracking Table: Maintain a Google Sheet with columns: profile name, proxy, last check date, DNS result, WebRTC result. Update after each check.

Conclusion

A DNS leak is one of the main reasons for bans when working with multi-accounting, traffic arbitrage, and managing client accounts on social networks. Even expensive residential or mobile proxies do not protect against leaks if the browser or system is misconfigured.

Checking a proxy for DNS leaks takes 2-3 minutes but can save you from losing accounts worth thousands of dollars. Use a combination of online services (DNSLeakTest, BrowserLeaks) and check not only DNS but also WebRTC, geolocation, and other parameters.

```