A DNS provider can not route your traffic through TCP proxies, so it must be the former.