DNS Resolver Check
See which DNS resolver your browser's queries actually use. Compare that IP and network to your VPN's documented DNS. A single resolver is not automatically a leak.
WebRTC Leak Test
Detect WebRTC IP leaks that can reveal your real IP address even when using VPN
DNS Resolver
Identify the DNS resolver answering your queries (EDNS), not your VPN egress IP
IPv6 Leak Test
Check if IPv6 traffic is leaking outside of your VPN tunnel
Guide & FAQ
What this check shows
RookCheck asks an EDNS echo service which recursive resolver handled the lookup. That is your DNS server identity — not your VPN egress IP and not a list of every resolver on the path.
How to read the result
Match the reported resolver IP/network to what your VPN client says it uses (or a privacy DNS you chose). ISP-branded DNS while the VPN is connected is a reason to check the VPN's DNS setting. We do not auto-fail a single resolver.
DNS over HTTPS
DoH encrypts queries but can still use a resolver outside the VPN if the browser targets a public DoH endpoint.
Is this a DNS leak test?
It identifies your DNS resolver so you can compare it to your VPN's expected DNS. It does not declare a leak from a single resolver IP.
How do I keep DNS inside the VPN?
Enable the VPN's DNS protection or kill switch, set system DNS to the VPN resolvers, then re-run this check and confirm the resolver matches.