• DNS Servers to Test
• Domains to Test

DNS Tests

• ISP's DNS server resolve test

  dig pastebin.com
  

• ISP's DNS taking queries by force test

  • On OpenWRT, disable "Use DNS servers advertised by peer" & use DNS servers
  • Check DNS servers appearing on browserleaks.org/ip & ipleak.net

• Blocked websites hang test on TLS client hello on the DNS servers

  curl -vik --resolve pastebin.com:443:1.1.1.1 <https://pastebin.com> -m 2
  

HTTP Tests

• Blocked domain test on host header

  curl -vik --header "Host: xvideos.com" 85.117.236.90
  

HTTPS Tests

• Blocked domain test on SNI

  curl -vik --resolve xvideos.com:443:85.117.236.90 <https://xvideos.com>