LE59TOOLSTrigger a random subdomain lookup and observe whether your recursive resolver is visible to the authoritative DNS — i.e. whether a DNS leak exists.
The browser requests a one-time random subdomain. After the query reaches the authoritative DNS for dns.le59.com through your recursive resolver, the service records that resolver address and returns it. Tokens expire quickly and are not used for cross-site tracking.
With a VPN, resolvers should normally belong to the VPN, your chosen encrypted DNS, or a public resolver you selected. An ISP, workplace, or school resolver may indicate a leak depending on your settings. A resolver differing from the exit IP is not a leak by itself.
Enable DNS leak protection or full-tunnel mode in the VPN, remove conflicting system or browser DNS settings, reconnect, and test again. If it persists, switch VPN nodes and share the observed resolver with your provider.