AnyProxy

Get Pro
Glossary · Web tech

DNS

Also calleddomain name systemwhat is dns
Definition

DNS is the system that turns a site name such as vimeo.com into the numeric IP address your device actually connects to.

Explanation

In depth

Before your browser can open any website it has to ask a DNS resolver one question: which IP address belongs to this name? The resolver is normally chosen by your network, usually your ISP or office router, unless you set a public one such as Cloudflare's 1.1.1.1 or Google's 8.8.8.8. Classic DNS travels unencrypted on port 53, so whoever runs the network can read the names you look up and can also answer them falsely. That makes DNS the cheapest place to block a site: the ISP simply replies with a wrong address. OONI measurements show this happening right now. On 14 October 2026 a test on Iran's Mobinnet network (AS50810) asked for vimeo.com and received 10.10.34.36, a private address that leads nowhere, instead of Vimeo's real servers. In Turkiye, OONI saw TurkNet answer lookups for YouTube with 195.175.254.2, an address associated with blocking. Changing resolver or using encrypted DNS defeats this kind of block, but not blocks based on the site's IP address or its TLS name. Through a web proxy, your device only looks up the proxy's own name; the lookup for the site you open happens on the proxy server, outside your network.

In practice

DNS in the real world

A real DNS block, read straight from OONI's raw data: on 14 Oct 2026 at 20:38 UTC, a probe on Mobinnet (AS50810) in Iran asked its system resolver for vimeo.com and got back 10.10.34.36. OONI classed it as a confirmed block with 'dns inconsistent', because resolvers outside Iran return Vimeo's public addresses. In OONI's 15 Jul - 15 Oct 2026 window, 3,453 of 7,220 Iranian tests of vimeo.com were confirmed blocks. Turkiye's TurkNet used the same trick on YouTube in September 2025, answering with 195.175.254.2.

Sources: OONI measurement: vimeo.com on Mobinnet AS50810, 14 Oct 2026 (DNS answer 10.10.34.36) · OONI Explorer: vimeo.com tests in Iran, 15 Jul - 15 Oct 2026 · OONI — Throttling of social media in Turkiye (20 Nov 2025)

Measured · 2026-10-05

youtube.com, resolved worldwide

15 public DNS resolvers queried via DomainScan.

Google · Global192.178.173.91
Cloudflare · Global192.178.173.91
OpenDNS · Global192.178.173.91
Quad9 · Global192.178.173.136
Level3 (USA) · North America192.178.173.190
DNS.WATCH (Germany) · Europe192.178.173.91
Yandex.DNS (Russia) · Europe192.178.173.93
AliDNS (China) · Asia192.178.173.136
NTT (Japan) · Asia192.178.173.190
Google Brazil · South America192.178.173.91
Cloudflare Brazil · South America192.178.173.190
Google Africa · Africa192.178.173.136
Cloudflare Africa · Africa192.178.173.136
Telstra (Australia) · Australia192.178.173.91
Cloudflare Sydney · Australia192.178.173.91

Questions about DNS

How can I tell if DNS is blocking a site?
Look up the name on your network and on a public resolver such as 1.1.1.1. A private address (10.x), a block-page address or no answer on your network, while the public resolver returns real IPs, points to a DNS block.
Does a web proxy use my DNS?
Only to find the proxy itself. Your device resolves anyproxy.site; the name of the site you open is resolved by the proxy server, so a false answer from your ISP never comes into play.
Is 10.10.34.36 a real website?
No. It is a private address range that is not routed on the public internet. Iranian ISPs return it for blocked names, so the browser waits and then fails.
See alsoHow managed Wi-Fi filters work

Related terms

DNS-over-HTTPSDNS over HTTPS (DoH) sends your DNS lookups inside an encrypted HTTPS connection, so the network in between can neither read nor rewrite the answers.DNS filteringDNS filtering blocks a website by making the address lookup fail or point somewhere else, so your browser never reaches the real server.DNS leakA DNS leak is when your device keeps asking its usual DNS server (often the ISP's) to look up site names while you think a VPN or proxy is handling your traffic, so the network still learns which sites you visit.TLS SNISNI (Server Name Indication) is the field at the start of an HTTPS connection where your browser names the site it wants, usually in readable text.

Put the concept to work

Try AnyProxy free — no install, no signup, six regions.

Open a blocked page