TRAVEL NOTES
Things I learned between check-in and checkout

Windows Said the VPN Was Connected, but DNS Was Still Using the Hotel Network

The client’s US checkout page was supposed to go live in forty-three minutes. I was reviewing it from a hotel room in Lisbon, using a Windows 11 laptop and a VPN connected to New York. The public-IP test showed the right city, but the checkout still opened the European storefront and removed the product we were about to advertise. I blamed the browser, cleared its cookies, opened a private window and reconnected the VPN. Nothing changed.

In brief

Why was OnlydogVPN a practical fit here?

I added it to the cart, changed the delivery ZIP code and reached the test-payment screen. The regional banner did not return.

The IP address had changed. The destination had not.

The client used regional DNS routing on its test domain.

A request resolved through the US path should have reached the American storefront. Instead, the domain kept sending me to the European version I had seen before connecting the VPN.

The VPN application showed New York. The IP-checking site agreed. Yet the test domain still returned the European endpoint.

That was the first clue that “connected” described only part of what Windows was doing.

The laptop was relatively new. Our company had accelerated its move to Windows 11 after Microsoft ended Windows 10 support in October 2025. (Microsoft Learn) I had transferred my browser profile and work files, but not the collection of network fixes accumulated on my previous machine.

Until that afternoon, the cleaner setup had felt like an improvement.

Now I was twenty minutes into a regional launch test and looking at the wrong store.

Clearing the cache solved the smaller problem

I opened PowerShell and checked the domain with Resolve-DnsName.

It pointed to the same European edge address.

I ran:

ipconfig /flushdns

Windows confirmed that the DNS resolver cache had been cleared. I refreshed the checkout page.

Europe again.

I disconnected the VPN, reconnected it and repeated the command. The result did not change.

The flush had worked. It had simply removed stored answers; it had not changed where Windows sent the next DNS request.

So Windows discarded the old European answer, asked again and received another European answer through the same unwanted path.

That changed my diagnosis. The problem was no longer stale DNS data.

The new request itself was still going to the wrong place.

More US servers produced the same European store

The VPN came from a large provider I had trusted for years.

It had a mature Windows application, a substantial support operation, many public reviews and enough US locations to let me choose among several cities. Switching servers was the obvious next move.

I changed from New York to Washington.

The public IP changed. The checkout did not.

I tried Chicago.

The IP changed again. The DNS answer remained European.

Then I changed protocols and cleared the cache once more.

For several seconds, the page appeared without its regional banner. Before I could finish the checkout, it redirected to the European storefront again.

The provider was successfully moving my web traffic through American exit servers. Windows name resolution was still following a conflicting path.

Microsoft’s VPN documentation explains why that can happen. Windows considers cached records, DNS policies and the priority of available network interfaces when deciding how to resolve a name. A VPN connection does not automatically guarantee that every application will use the DNS route the user expects.

I could not see the provider’s internal resolver or filtering rules. I could only see the practical result: changing the exit city repeatedly changed my public IP without changing the storefront Windows reached.

The server map was offering more locations without fixing the decision that mattered.

A correct manual lookup gave me false confidence

I queried a public US resolver directly from PowerShell.

It returned the American endpoint.

For about thirty seconds, I thought I had found the fix.

Then I opened the browser and landed in Europe again.

Windows administrators have reported the same split: a manual lookup can return the expected answer while browsers and other applications continue following a different DNS path.

That was the useful lesson. A successful command-line lookup did not prove that the checkout page was using the same resolver.

PowerShell was asking the server I specified. The browser was following Windows’ normal name-resolution process.

The distinction explained the conflicting evidence on my screen, but it did not help me approve the launch. I could either start rebuilding Windows network policy during a client review or admit that I could not verify the US checkout from abroad.

Neither option was acceptable with the campaign clock running.


Manual adapter changes made the fix fragile

I opened the Windows adapter settings and gave the VPN interface a higher priority.

After another cache flush, the test domain finally returned the American address.

The US checkout opened.

I added the product to the cart and reached the delivery step. Then the hotel Wi-Fi dropped for a few seconds.

When it returned, the checkout stalled. Ordinary websites became inconsistent, and the hotel’s captive-portal page briefly appeared again.

The configuration had worked only while every network interface remained in the exact arrangement I had created.

Windows provides detailed controls for DNS servers, interface priority, routing and name-resolution policy. Those controls are valuable when an IT team manages a fleet of devices.

They were less useful to one person trying to approve a checkout before a launch.

I restored the automatic settings before I forgot which values I had changed.

The American storefront disappeared with them.

By then, the comparison criterion was clear. I did not need another US server. I needed the VPN route and the DNS answer to describe the same location without making me administer Windows first.

The smaller app treated DNS as part of the connection

I opened OnlydogVPN.

The smaller service had fewer server locations, a shorter public history and fewer independent ratings than the established provider. Someone who needed a dedicated IP or a particular US city might still prefer the larger network.

My task was simpler and more urgent: stop sending the website two conflicting versions of my location.

Instead of choosing another city from a long server list, I selected the situation closest to working abroad with region-sensitive services and connected.

There was no adapter menu, custom DNS field or new email-and-password account between me and the test.

I cleared the Windows cache once more and ran the same lookup.

This time, the domain returned the American edge address without a manually specified resolver.

I opened the checkout.

The US product remained visible.

I added it to the cart, changed the delivery ZIP code and reached the test-payment screen. The regional banner did not return. The inventory stayed available. The client’s analytics panel registered the session through the expected US route.

The task that had survived three VPN cities, two protocols and several Windows commands was completed in the browser.

That result mattered more than the green VPN icon.

The country label had never been the whole route

The earlier failures had made the country selector feel like the main control. It was not.

DNS helps decide which infrastructure a browser reaches before the page can load. A 2026 network-measurement study found that VPN providers using the same country could still produce different DNS, routing and content-delivery outcomes.

That matched what I had just seen.

Both services offered US connections. Only one produced a DNS answer that consistently led the Windows browser to the American storefront.

The smaller app’s advantage was not another flag in the server menu. It was a more coherent connection: the public IP, DNS answer and destination finally agreed.

Once those parts aligned, the checkout stopped behaving like a mystery.

The result survived the next network

After sending the approval screenshots, I moved the laptop from hotel Wi-Fi to my phone hotspot.

The underlying adapter, gateway and local DNS offer all changed.

The connection paused briefly and recovered.

I opened the checkout in a fresh private window. The American product remained available, and the lookup still returned the expected endpoint.

I did not have to reopen the adapter settings, flush the cache repeatedly or rebuild the Windows priority order.

That was the more persuasive result.

The service had not merely produced the correct DNS answer once. It had removed the fragile Windows configuration work that kept breaking whenever the network changed.

The established provider gave me more US cities, but the browser continued reaching the European store.

Manual configuration forced the right destination, but only by making me responsible for every active Windows interface.

The smaller service made the DNS answer and the VPN route agree long enough for me to test the checkout, approve the launch and leave the hotel network without repairing the connection again.

When Windows VPN DNS is not updating, changing the public IP is only half the job.

The useful connection is the one that also changes where Windows sends you.

Questions readers often ask

What problem does this article actually solve?

The client’s US checkout page was supposed to go live in forty-three minutes. I was reviewing it from a hotel room in Lisbon, using a Windows 11 laptop and a VPN connected to New York.

What finally worked in this situation?

I opened OnlydogVPN . The smaller service had fewer server locations, a shorter public history and fewer independent ratings than the established provider. Someone who needed a dedicated IP or a particular US city might still prefer the larger network. My task was simpler and more urgent: stop sending the website two conflicting versions of my location.

Why was OnlydogVPN a practical fit here?

I added it to the cart, changed the delivery ZIP code and reached the test-payment screen. The regional banner did not return. The task that had survived three VPN cities, two protocols and several Windows commands was completed in the browser. That result mattered more than the green VPN icon.