ipconfig (Windows) or Network Details (macOS/iOS/Android) before modifying network settings.Cryptographic DNS Leak & DoH Resolver Inspector
Idle · Ready to TestAudit whether your ISP, VPN, or browser is leaking unencrypted DNS queries. Dispatches ephemeral cryptographic subdomains and probes recursive anycast endpoints in real time.
| Observed Resolver IP | Provider / Host | Protocol Transport | Security Status |
|---|---|---|---|
| Click "Start Cryptographic DNS Leak Test" above to analyze active DNS routing. | |||
How this guide helps
Use the steps below to separate what the available evidence confirms from what remains uncertain. Match your exact model and firmware, then test one low-risk change at a time.
Work step
- Choose expected resolver
- Run controlled test
- Compare IPv4/IPv6
- Interpret limits
Router-admin style decision panel
| what you see | It means | Safe next step |
|---|---|---|
| Resolver | query endpoint | ownership/geolocation uncertain |
| VPN | path may intentionally differ | VPN policy read |
| DoH | browser bypass | Not a router-only conclusion |
Verification and limitations
Confirm the exact model/revision, firmware/ISP scope and official manual or standard before acting. If a detail is unknown, treat it as unverified; do not present guesses as verified credentials or guaranteed fixes.
Next useful links
/network/dns-settings-router/ · /security/after-router-login-checklist/ · /network/ipv6-home-router-basics/
Authoritative Public DNS Resolvers, Anycast Endpoints & Encrypted Transport Specs
| Resolver Provider | Primary IPv4 | Secondary IPv4 | Primary IPv6 | DNS-over-HTTPS (DoH) | DNS-over-TLS (DoT) | Filtering Scope |
|---|---|---|---|---|---|---|
| Cloudflare Standard | 1.1.1.1 | 1.0.0.1 | 2606:4700:4700::1111 | https://cloudflare-dns.com/dns-query | 1.1.1.1:853 | Zero logging, ultra-fast routing |
| Cloudflare Security | 1.1.1.2 | 1.0.0.2 | 2606:4700:4700::1112 | https://security.cloudflare-dns.com/dns-query | security.cloudflare-dns.com:853 | Blocks malware and phishing domains |
| Google Public DNS | 8.8.8.8 | 8.8.4.4 | 2001:4860:4860::8888 | https://dns.google/dns-query | dns.google:853 | Global authoritative caching, Anycast |
| Quad9 Security & Privacy | 9.9.9.9 | 149.112.112.112 | 2620:fe::fe | https://dns.quad9.net/dns-query | dns.quad9.net:853 | Swiss jurisdiction, threat intelligence blocklist |
| AdGuard Default | 94.140.14.14 | 94.140.15.15 | 2a10:50c0::ad1:ff | https://dns.adguard-dns.com/dns-query | dns.adguard-dns.com:853 | Blocks web ads, trackers, and malicious domains |
| OpenDNS Home | 208.67.222.222 | 208.67.220.220 | 2620:119:35::35 | https://doh.opendns.com/dns-query | dns.opendns.com:853 | Cisco umbrella intelligence, customizable categories |
| Control D Free | 76.76.2.0 | 76.76.10.0 | 2606:1a40:: | https://freedns.controld.com/p0 | p0.freedns.controld.com:853 | Ad and tracker blocking without software installation |
General questions
Will the same rule in Router DNS leak self-check work on all routers?
No. Menus and results vary by model, hardware revision, firmware, ISP, region and prior setup. Check the exact source and current gateway.
Can Router Portal see my credentials?
No. Router Portal will not ask for a router or Wi‑Fi password; the local admin page opens only in your browser on your network.
What is the first next step if it does not work?
Check connection, current default gateway, model/revision and official manual together. Factory reset or broad exposure is not the first step.
Source and scope
Confirm current guidance in manufacturer or ISP documentation, relevant IETF/IANA material, or official operating-system documentation. Support, menus and firmware vary by model and region; this general guide does not replace the exact manual.
Our networking steps are lab-tested against standard RFC 1918 private networking protocols across Windows 11 (24H2), macOS Sequoia (15.1), iOS 18, and Android 15. We verify physical device labels and firmware release documentation before publishing gateway instructions. Router Portal is strictly read-only and never requests, intercepts, or logs router passwords.