Edge using Amazon DNS?

blackice

Level 39
Thread author
Verified
Top Poster
Well-known
Apr 1, 2019
2,823
When I run any dns leak test to check my router is working right I get this result only in edge. Is anyone else seeing this result showing Amazon in addition to the correct servers?
1712258797609.png


Edit: seems to not just be edge. Maybe a router or windows issue, which is strange since I just factory reset it. It happens with all DNS on all browsers now.
 
Last edited:

TairikuOkami

Level 36
Verified
Top Poster
Content Creator
Well-known
May 13, 2017
2,515
Quad9 is non-profit, it does not have it's own servers, just like adguard, it uses whichever CDN provider they have loaned them from.
Those 2 IPs are dedicated for IP Routing, it might be caused by some router's settings. I would never ever use router as DNS.
 

Attachments

  • capture_04042024_214332.jpg
    capture_04042024_214332.jpg
    294.5 KB · Views: 79
  • capture_04042024_214715.jpg
    capture_04042024_214715.jpg
    151.9 KB · Views: 76
  • capture_04042024_220312.jpg
    capture_04042024_220312.jpg
    206.4 KB · Views: 100

blackice

Level 39
Thread author
Verified
Top Poster
Well-known
Apr 1, 2019
2,823
Quad9 is non-profit, it does not have it's own servers, just like adguard, it uses whichever CDN provider they have loaned them from.
Those 2 IPs are dedicated for IP Routing, it might be caused by some router's settings. I would never ever use router as DNS.
They don't use Amazon servers in Dublin on their list of locations. Also it happens regardless of the dns service set in router or DoH in browser.
 

blackice

Level 39
Thread author
Verified
Top Poster
Well-known
Apr 1, 2019
2,823
I'm getting 8 Amazon/Dublin and my ISP provider. With Brave on my desktop PC. Just using "OS Default" DNS in Brave, nothing on my router.
Yeah I think Microsoft did something in the latest update. This wasn't happening a couple weeks ago. And it's only on my W11 machines regardless of browser. I doesn't happen on my work laptop which is W10.
 

Jonny Quest

Level 17
Verified
Top Poster
Well-known
Mar 2, 2023
799
So, how do we get rid Amazon, even Mullvad is saying it's a leak (12 ip addresses). Trying about 4 of the DNS options in Brave didn't totally resolve it. OpenDNS just showed 3 Amazon ip's compared to 8. Clearing all the browser history (feeble attempt) didn't do a thing. It doesn't look like they are all the same ip addresses that could be blocked in the firewall.

mullvad leaktest.jpg
 
  • Like
Reactions: Morro and vtqhtr413

blackice

Level 39
Thread author
Verified
Top Poster
Well-known
Apr 1, 2019
2,823
So, how do we get rid Amazon, even Mullvad is saying it's a leak (12 ip addresses). Trying about 4 of the DNS options in Brave didn't totally resolve it. OpenDNS just showed 3 Amazon ip's compared to 8. Clearing all the browser history (feeble attempt) didn't do a thing. They are not all the same ip addresses that could be blocked in the firewall.

No clue. Nothing in Windows indicates a DNS being set. It hits even when DoH is set in edge. It hits in Chrome and Firefox. In browserleaks, dnscheck.tools, dnsleaktest.com. Unless we all have the same malware I think windows is doing something funny.
 
Last edited:

Jonny Quest

Level 17
Verified
Top Poster
Well-known
Mar 2, 2023
799
No clue. Nothing in Windows indicates a DNS being set. It hits even when DoH is set in edge. It hits in Chrome and Firefox. In browserleaks, dnscheck.tools, dnsleaktest.com. Unless we all have the some malware I think windows is doing something funny.
Incredible find, blackice. My other post was from a Windows 10 desktop, this is from a Windows 11 laptop, on both I'm using Brave.
 
  • Like
  • Applause
Reactions: Morro and vtqhtr413

blackice

Level 39
Thread author
Verified
Top Poster
Well-known
Apr 1, 2019
2,823

Freki123

Level 16
Verified
Top Poster
Aug 10, 2013
753
I'm on win 11 and using nextdns which is entered as the DNS server with no fallback option under the windows 11 network settings( the DNS/Ethernet part stuff).
Edge: Version 123.0.2420.81 (Official build) (64-bit), Os 23H2 Build 22631.3296

Untitled - Copy.jpg
 
  • Like
Reactions: Morro

Morro

Level 17
Verified
Top Poster
Well-known
Jul 8, 2012
844
Well, right now Amazon does not appear for me in Brave And Opera One. It looks like it wanted to load as well, but then in the end it does not?
 
  • Like
Reactions: vtqhtr413

blackice

Level 39
Thread author
Verified
Top Poster
Well-known
Apr 1, 2019
2,823
Well, right now Amazon does not appear for me in Brave And Opera One. It looks like it wanted to load as well, but then in the end it does not?
It doesn’t appear every test but I have it in any browser using any of these after 2 or 3 tests:
dnscheck.tools
browserleaks.com
dnsleaktest.com

Still happening for me this morning.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top