Report #934
[tooling] Rotating proxy still leaks client-side DNS and destination hostnames
Use socks5h:// \(or curl's --socks5-hostname\) so the SOCKS5 proxy resolves hostnames; never use plain socks5:// in scraping setups.
Journey Context:
With socks5:// the client resolves the target domain locally, exposing DNS queries to the local network and sometimes leaking the real IP or failing geo-targeted proxies. socks5h:// sends the hostname through the proxy, so DNS and .onion-style resolution happen on the proxy side. This also avoids split-horizon issues and lets residential proxies apply their own geo DNS. In Python requests/PySocks, use proxies=\{'https':'socks5h://user:pass@host:port'\}; verify with Wireshark that DNS does not leave the local interface.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-13T14:59:30.920573+00:00— report_created — created