WeChat sends messages without a hitch. Moments refreshes. Channels videos play fine. But the second you open a browser, pages spin forever — or you get hit with "This site can't be reached." The connection obviously isn't fully down, so why is it only web pages that fail?
This doesn't necessarily mean your broadband is broken, and it's not automatic proof of a DNS leak either. Faulty DNS resolution, browser settings, and IPv6 connectivity problems can all produce the same symptoms. The best approach is to narrow down the scope first, then work through the likely causes one by one.

WeChat and browsers use the network in very different ways.
Once you're signed in, WeChat keeps its existing connections alive, and much of the chat history and image content is cached on the device. Even when some requests go wrong, connections that are already established can keep working.
A browser has to do far more: resolve the domain name, open a connection, and load every resource on the page. If any one of those steps fails, you end up with a blank page, a slow load, or no access at all.
So WeChat working only proves that your device has some form of internet access. It tells you nothing about whether DNS, your router, or the network line is actually healthy.
Don't rush to change your DNS address. Run a few quick comparisons instead.
Open the same site in a different browser. If only one browser fails, the problem probably lies with an extension, the browser's secure DNS setting, or cached data.
Then try a few unrelated websites. If only a handful won't load, the site's server may be down — or that particular domain may have a resolution or connection problem.
If you're on Wi-Fi, switch your phone to mobile data and test again. When a site loads on cellular but not on Wi-Fi, check that network's DNS and router settings first.
These comparisons narrow the search and keep you from repeatedly changing settings that were never the issue.
DNS turns a domain name into the IP address your device actually connects to. If resolution fails, the browser can't locate the target server.
On Windows, press Win + R, type cmd, and open Command Prompt. Then run:
nslookup www.baidu.comA normal response shows your DNS server details along with the resolved IP address.
If you get a timeout or a "can't find" message, run this instead:
nslookup www.baidu.com 223.5.5.5This queries a different DNS server.
If your default DNS fails but the specified server returns results, your current DNS configuration or server is likely at fault and needs a closer look.
One caveat: a clean nslookup doesn't guarantee the browser will load pages. Some browsers use their own secure DNS setting, so the actual resolution path can differ from what you see on the command line.
If domains resolve correctly but pages still won't open, the problem is more likely in browser configuration, local cache, or the connection itself. Work through the list below in order.
| What to check | Likely cause | What to do |
|---|---|---|
| Browser secure DNS | The browser can't reach the DNS server it's set to use | Review the browser's secure DNS setting, adjust it temporarily, then reload the page |
| DNS cache | Outdated or incorrect records stored locally | Run ipconfig /flushdns in Command Prompt |
| hosts file | The domain is mapped to the wrong IP address | Check C:\Windows\System32\drivers\etc\hosts, back it up, then correct any bad entries |
| IPv6 connectivity | An unstable IPv6 connection causes certain sites to fail | Disable IPv6 briefly for a comparison test, then restore it or adjust the configuration |
| Router settings | Router DNS is misconfigured or parts of the network are restricted | Check the router's DNS settings and test with another device for comparison |
| Security software | A firewall or security suite is blocking some web connections | Review block logs and network permissions to see whether anything was flagged by mistake |
Start with browser settings and the DNS cache, then move on to hosts, IPv6, and the router. If several devices on the same Wi-Fi all fail to load pages, check the router and your network service first rather than tweaking one machine over and over.
A DNS resolution failure and a DNS leak are two different problems.
• A DNS resolution failure means your device can't obtain the IP address for a domain — which can directly stop a page from loading.
• A DNS leak means DNS queries aren't sent along the path you intended, so the query data is answered by a DNS service you didn't expect.
• Both can occur on the same network, but a page that won't load is not on its own evidence of a leak.
Likewise, a DNS server located in another city — or run by a different provider than your ISP — doesn't automatically mean a leak. You have to compare the actual DNS configuration with the path you expected.
If you switch between Wi-Fi networks often, or you've changed your DNS settings and started running into access problems, it's worth checking which DNS servers your device is really using.
A ToDetect DNS check shows the DNS servers and related network details observed during the test, so you can compare them with your current configuration.
If the results include DNS servers you didn't expect, dig into the DNS settings on your device, browser, or router.
Keep in mind that a leak test is about mapping the resolution path — it can't explain every reason a page won't load. A clean result doesn't mean the browser or the connection is free of other faults.
Not always. DNS trouble is one of the most common causes, but browser configuration, network connectivity, and security software can all affect page loads.
If the problem comes from your current DNS server, switching to one that works properly may help. But if the fault is at the connection or browser level, changing DNS usually makes no difference.
It can be. Public DNS providers and network routing often put servers outside your own city, so location alone doesn't prove a leak.
If WeChat works but web pages won't open, compare browsers and networks first, then check DNS resolution, browser settings, and IPv6 connectivity.
If you suspect the query path is off, cross-check with ToDetect's results. Working through the actual symptoms step by step beats swapping DNS servers or rebooting devices at random.
Efficiently solve multi-account management, environment isolation, and account security