Today, I did a test on ipleak(.)net to check if the Mullvad / Android kill switch was working properly.
I have these two settings active: "Always-on VPN" and "Block connections without VPN".
While I was doing the DNS leak test, I clicked "Disconnect" from the Mullvad notification, and the VPN was disconnected, and as a result the connection was blocked. But reactivating it immediately afterwards (again from the notification), the site: ipleak(.)net detected the DNS of my real ISP.
How is it possible? I understand that it is not a Mullvad problem 100%, but an Android problem. But is something like this normal? If the connection was blocked, why was it able to detect my real dns server for a second? If you want, test it too, and tell me if the same thing happens to you.