Are you using a proxy for working with Facebook Ads, managing client Instagram accounts, or scraping marketplaces, but suddenly getting banned? One of the main reasons is a DNS leak, which reveals your real IP address even when connected through a proxy. In this article, we will discuss how to check a proxy for DNS leaks in 2 minutes and set up protection in anti-detect browsers.
A DNS leak is a situation where your browser or application sends DNS requests through your provider, bypassing the proxy server. As a result, the target site (Facebook, Instagram, Wildberries) sees your real IP and can link all the accounts you manage.
What is a DNS Leak and Why is it Dangerous
DNS (Domain Name System) is a system that translates domain names (e.g., facebook.com) into IP addresses. When you open a website, your browser first sends a DNS request to find out the server's IP address. Usually, this request is handled by your internet provider's DNS server.
When using a proxy, all requests should go through the proxy server, including DNS requests. But in practice, many browsers and applications ignore proxy settings for DNS and continue to send requests directly to the provider. This is what a DNS leak is.
Real Example: An arbitrageur launches 10 Facebook Ads accounts through different proxies and profiles in Dolphin Anty. But due to a DNS leak, all accounts send DNS requests from one IP provider. Facebook links the accounts and issues a chain ban on all 10 accounts simultaneously.
The Dangers of DNS Leaks for Different Tasks
| Task | Risk of DNS Leak |
|---|---|
| Facebook Ads Multi-Accounting | Chain ban of all ad accounts linked through one DNS server |
| Managing Client Instagram Accounts | Account blocking for suspicious activity from one IP |
| Scraping Wildberries or Ozon | IP ban from the provider, proxies become useless |
| Posting Ads on Avito | Linking all ads, limiting postings |
| Working with TikTok Ads | De-anonymization, banning ad accounts for rule violations |
A DNS leak is especially critical when working with residential proxies — you pay for IPs of real users from the required geolocation, but due to the leak, the site sees your real address in a different country or city. This instantly raises suspicions with the anti-fraud systems of Facebook, Instagram, and other platforms.
When to Check a Proxy for Leaks
Checking a proxy for DNS leaks is not a one-time procedure. There are situations when checking is mandatory, even if everything worked fine before.
Mandatory Cases for Checking
- First connection of a new proxy — even if the provider guarantees no leaks, check it yourself. The issue may be on your browser or operating system's side.
- Setting up a new profile in an anti-detect browser — each profile in Dolphin Anty, AdsPower, or Multilogin needs to be checked separately. Settings may differ between profiles.
- After updating the browser or operating system — updates may reset DNS settings or add new features that bypass the proxy (e.g., DNS over HTTPS in Chrome).
- When changing the proxy provider — different providers use different protocols and settings. What worked with one may leak with another.
- Before launching an ad campaign with a new budget — check all accounts before pouring money into Facebook Ads or TikTok Ads. A ban during an active campaign = loss of budget.
- When moving or changing internet providers — a new provider may use an aggressive DNS server that intercepts requests.
💡 Tip for SMM Specialists
If you manage client accounts on Instagram or TikTok, create a checklist for checking each new account. Include DNS, WebRTC, timezone, and browser language checks. This will take 3 minutes but can save you from losing a client's account.
How Often to Check Active Proxies
Even if the proxy works without issues, periodic checks are necessary:
- Once a week — for critical tasks (traffic arbitrage, working with expensive accounts)
- Once a month — for routine tasks (scraping, price monitoring)
- After any technical issues — connection drops, slow performance, strange website behavior
Checking via Online Services: 5 Best Tools
The simplest way to check a proxy for DNS leaks is to use specialized online services. They show what IP address and DNS servers the site sees when connected through your proxy.
1. DNSLeakTest.com — The Most Popular Service
This is a classic tool for checking DNS leaks used by arbitrageurs and SMM specialists worldwide.
How to Check:
- Connect to the proxy in your browser or anti-detect browser (Dolphin Anty, AdsPower, GoLogin)
- Open the site
dnsleaktest.com - Click the "Standard test" button for a quick check or "Extended test" for a detailed analysis
- Wait for the results (5-10 seconds)
How to Read the Results:
- ✅ No Leak: The table shows DNS servers that belong to your proxy provider or are located in the same country as the proxy IP
- ❌ Leak Detected: The table shows DNS servers of your internet provider (usually with the provider's name or your city)
Important: If you are using a proxy from the USA, and the DNS servers show your provider from Russia — this is a 100% leak. Facebook and Instagram will immediately detect the discrepancy.
2. BrowserLeaks.com — Comprehensive Check
This service checks not only DNS but also other parameters that can de-anonymize you: WebRTC, Canvas fingerprint, timezone, browser languages.
What to Check:
- "IP Address" section — shows your IP and geolocation
- "DNS Leak Test" section — checks DNS servers
- "WebRTC Leak Test" section — real IP leak through WebRTC (critical for video calls and some websites)
BrowserLeaks is especially useful when setting up profiles in anti-detect browsers — you can immediately see all parameters that might expose you.
3. IPLeak.net — Simple and Fast
A minimalist service that shows IP, DNS, and torrent IP (if you use torrents through a proxy). The check occurs automatically upon opening the page.
Advantage: No need to press buttons — just open the site and see the result. Convenient for a quick check before starting work.
4. WhoER.net — With Anonymity Check
WhoER shows not only technical parameters but also the level of anonymity on a 100-point scale. It takes into account DNS, WebRTC, browser headers, Flash, Java, and other factors.
How to Interpret the Score:
- 90-100 points: Excellent anonymity, no leaks
- 70-89 points: Good, but there are minor leaks (e.g., timezone does not match IP)
- Below 70: Serious anonymity issues, requires fixing
5. Perfect-Privacy.com — Detailed Analysis
A service from a VPN provider, but it works great for checking proxies as well. It shows detailed information about DNS servers, their owners, and geographical locations.
Feature: It shows not only the IPs of DNS servers but also their owners (ISPs). This helps to understand who owns the servers — your proxy provider or your home internet provider.
Comparison of Checking Services
| Service | Speed | Detail | For Whom |
|---|---|---|---|
| DNSLeakTest | Fast (5-10 sec) | Average | All tasks |
| BrowserLeaks | Medium (15-20 sec) | Very High | Multi-Accounting |
| IPLeak | Instantly | Basic | Quick Check |
| WhoER | Fast (5 sec) | High | Beginners |
| Perfect-Privacy | Medium (10-15 sec) | Very High | Professionals |
DNS Check in Anti-Detect Browsers
If you work with multi-accounting in Facebook Ads, Instagram, or other platforms, you use anti-detect browsers: Dolphin Anty, AdsPower, Multilogin, GoLogin, or Octo Browser. Each browser has built-in checking tools, but they are not always reliable.
Checking in Dolphin Anty
Dolphin Anty is a popular anti-detect browser among arbitrageurs. It has built-in IP and DNS checks.
Step-by-step Instructions:
- Create a profile and set up the proxy (HTTP, SOCKS5, or mobile)
- In the profile card, click "Check Proxy"
- Dolphin will show the IP, country, and proxy status
- Launch the profile and open any DNS checking service (DNSLeakTest or BrowserLeaks)
- Compare the results: IP from Dolphin and DNS from the service should be from the same country/region
💡 Important Detail
The built-in check in Dolphin Anty shows only the proxy IP but does NOT check DNS. Be sure to use external services for a complete check.
Checking in AdsPower
AdsPower offers a more detailed built-in check, but it does not replace external services.
How to Check:
- Open profile settings → "Proxy" tab
- Enter proxy details and click "Check Proxy"
- AdsPower will show the IP, geolocation, speed, and status
- Launch the profile and check DNS through BrowserLeaks (DNS Leak Test section)
AdsPower also shows the type of proxy (residential, data center, mobile), which helps ensure the settings are correct.
Checking in Multilogin and GoLogin
These browsers work similarly: the built-in check shows the IP and basic parameters, but to check DNS, you need to use external services after launching the profile.
Universal Algorithm for Any Anti-Detect Browser:
- Set up the proxy in the profile
- Use the built-in check to confirm the connection
- Launch the profile
- Open DNSLeakTest.com and run the Extended test
- Open BrowserLeaks.com → WebRTC Leak Test (check for leaks via WebRTC)
- Save screenshots of the results for documentation
How to Fix a DNS Leak: 4 Methods
If the check shows a DNS leak, don't panic. There are several ways to fix the problem — from simple browser settings to changing the type of proxy.
Method 1: Disable DNS over HTTPS in the Browser
Modern browsers (Chrome, Firefox, Edge) use DNS over HTTPS (DoH) technology, which encrypts DNS requests and sends them through Google or Cloudflare, bypassing the proxy. This needs to be disabled.
For Google Chrome and anti-detect browsers based on Chromium:
- Open browser settings (three dots → Settings)
- Go to "Privacy and security"
- Find "Use secure DNS"
- Disable this option (toggle to OFF)
- Restart the browser
For Firefox:
- Open settings (three lines → Settings)
- Go to "Privacy & Security"
- Scroll to "DNS over HTTPS"
- Select "Off" or "Default" (depends on the version)
Method 2: Use SOCKS5 Instead of HTTP Proxy
HTTP proxies only work with web traffic and often bypass DNS requests. SOCKS5 proxies operate at a lower level and intercept all requests, including DNS.
If your proxy provider supports both protocols, switch to SOCKS5:
- In the anti-detect browser profile settings, select "SOCKS5" type
- Enter the same proxy details (IP, port, username, password)
- Save and restart the profile
- Check DNS through DNSLeakTest
Most mobile proxies and residential proxies support SOCKS5 — check with your provider.
Method 3: Manually Configure System DNS
If the browser continues to use the provider's DNS, you can change the system DNS settings to public servers that do not reveal your geolocation.
For Windows:
- Open "Network and Internet settings"
- Select the active connection → "Properties"
- Click "Edit" in the "DNS server assignment" section
- Select "Manual" and enter public DNS (e.g., Cloudflare: 1.1.1.1 and 1.0.0.1)
- Save changes
For macOS:
- System Preferences → Network
- Select the active connection → "Advanced"
- DNS tab
- Add public DNS (1.1.1.1, 8.8.8.8)
- Click OK and "Apply"
Attention: This method does NOT completely solve the problem. If the proxy does not support DNS proxying, requests will still go through public servers, which may raise suspicions (e.g., IP from the USA, but DNS from Cloudflare).
Method 4: Change to a More Reliable Proxy Provider
If none of the methods work, the problem lies with the proxy server itself. Cheap proxy providers often do not configure DNS proxying correctly.
Signs of a Problematic Provider:
- DNS leak persists even when using SOCKS5
- The provider cannot explain how DNS is configured on their servers
- Frequent connection drops or slow performance
- Lack of technical support or slow responses
When choosing a new provider, pay attention to:
- SOCKS5 Support — a mandatory requirement for safe operation
- Own DNS Servers — the provider should explicitly state that DNS requests go through their infrastructure
- Reviews from Arbitrageurs and SMM Specialists — look for discussions on specialized forums
- Testing Opportunity — good providers offer a trial period or money-back guarantee
Common Mistakes When Checking Proxies
Even experienced arbitrageurs and SMM specialists make mistakes when checking proxies for leaks. Let's discuss the most common ones.
Mistake 1: Checking Only with Built-in Tools of the Anti-Detect Browser
Dolphin Anty, AdsPower, and other browsers show that the proxy is connected and the IP is correct. But this does NOT mean that DNS is not leaking. Built-in checks often ignore DNS requests.
Solution: Always use external services (DNSLeakTest, BrowserLeaks) after launching the profile.
Mistake 2: Checking DNS Without Connecting to the Proxy
Some users open DNSLeakTest in a regular browser without a proxy to "see how the service works." This is pointless — you will see your provider's DNS, which is normal for a regular connection.
Solution: Check only after connecting to the proxy in an anti-detect browser or setting the proxy in the system.
Mistake 3: Ignoring WebRTC Leaks
WebRTC is a technology for video calls in the browser. It can reveal your real IP even when using a proxy. Many check only DNS and overlook WebRTC.
Solution: Check WebRTC through BrowserLeaks.com → WebRTC Leak Test. Anti-detect browsers usually have a "Disable WebRTC" setting — enable it.
Mistake 4: Using Free or Cheap Proxies for Critical Tasks
Free proxies and services for $2-5 a month almost always have DNS leaks, slow speeds, and are used by thousands of other users. For Facebook Ads, Instagram, or TikTok, this guarantees a ban.
Solution: For multi-accounting and arbitrage, use quality residential or mobile proxies from trusted providers. Saving $10-20 a month could cost you accounts worth thousands of dollars.
Mistake 5: Not Checking Each Profile Separately
If you have 10 profiles in Dolphin Anty with different proxies, you cannot check one profile and assume the others work the same. Each profile may have its own settings and issues.
Solution: Create a checklist and check each new profile before use. For active profiles — selective checks once a week.
Leak Prevention: Settings Checklist
It is better to prevent a DNS leak than to fix the consequences of a ban. Here is a settings checklist that should be completed before starting work with a proxy.
Checklist for Anti-Detect Browser (Dolphin Anty, AdsPower, GoLogin)
- Proxy Type: Choose SOCKS5 instead of HTTP (if the provider supports it)
- DNS over HTTPS: Disable in browser settings (Privacy and Security → Use secure DNS → OFF)
- WebRTC: Disable or set "Use proxy IP" mode in profile settings
- Geolocation: Set the geolocation corresponding to the proxy IP (e.g., for an IP from New York, select New York coordinates)
- Timezone: Set the timezone of the country/city of the proxy (for US proxies — American timezone)
- Browser Language: Set the language corresponding to the proxy's geolocation (for the USA — English (United States))
- Check After Setup: Launch profile → open DNSLeakTest → Extended test → check BrowserLeaks (WebRTC, Canvas, Timezone)
- Documentation: Take a screenshot of the check results and save it in the profile folder
Checklist for Choosing a Proxy Provider
Before purchasing a proxy, ask the provider these questions:
- ✅ Do you support the SOCKS5 protocol?
- ✅ Do you have your own DNS servers or do you use third-party ones?
- ✅ Are DNS requests proxied through your servers?
- ✅ Can I test the proxy before purchasing?
- ✅ What is your refund policy if the proxies are unsuitable?
- ✅ Do you have experience working with clients from arbitrage/SMM/e-commerce?
If the provider cannot answer these questions or responds evasively — this is a red flag.
Regular Checks: Schedule for Different Tasks
| Task | Check Frequency | What to Check |
|---|---|---|
| Facebook Ads Arbitrage | Before each campaign launch | DNS, WebRTC, IP, geolocation |
| SMM of Client Accounts | Once a week | DNS, IP, timezone |
| Scraping Marketplaces | Once a month | DNS, speed, IP |
| Posting Ads on Avito | Before mass posting | DNS, city geolocation |
| TikTok Ads Arbitrage | Daily (first week), then every 3 days | DNS, WebRTC, Canvas fingerprint |
Automation of Checks
If you have dozens of profiles, checking each one manually takes a long time. You can partially automate the process:
- Create a bookmark for DNSLeakTest: Bookmark the direct link to the Extended test. When launching a profile, immediately open the bookmark.
- Use screenshot extensions: Install an extension for automatic screenshots of pages (e.g., Fireshot). Save the check results to the cloud.
- Profile Tracking Table: Maintain a Google Sheet with columns: profile name, proxy, last check date, DNS result, WebRTC result. Update after each check.
Conclusion
A DNS leak is one of the main reasons for bans when working with multi-accounting, traffic arbitrage, and managing client accounts on social networks. Even expensive residential or mobile proxies do not protect against leaks if the browser or system is misconfigured.
Checking a proxy for DNS leaks takes 2-3 minutes but can save you from losing accounts worth thousands of dollars. Use a combination of online services (DNSLeakTest, BrowserLeaks) and check not only DNS but also WebRTC, geolocation, and other parameters.