DNS Providers
Public DNS resolvers — addresses, filtering policy, and DNS-over-HTTPS support. Free to download.
| IP address | Operator | Filtering | DoH | Notes |
|---|---|---|---|---|
94.140.14.14
v4
|
AdGuard DNS | Blocks ads / trackers |
dns.adguard-dns.com
|
AdGuard DNS (Default) — blocks ads and trackers network-wide; no adult-content or malware-specific filtering beyond that. |
94.140.15.15
v4
|
AdGuard DNS | Blocks ads / trackers |
dns.adguard-dns.com
|
AdGuard DNS (Default) — blocks ads and trackers network-wide; no adult-content or malware-specific filtering beyond that. |
2a10:50c0::ad1:ff
v6
|
AdGuard DNS_IPv6 | Blocks ads / trackers |
dns.adguard-dns.com
|
AdGuard DNS (Default), IPv6 — same service as the IPv4 AdGuard DNS row above. |
2a10:50c0::ad2:ff
v6
|
AdGuard DNS_IPv6 | Blocks ads / trackers |
dns.adguard-dns.com
|
AdGuard DNS (Default), IPv6 — same service as the IPv4 AdGuard DNS row above. |
94.140.14.15
v4
|
AdGuard Family DNS | Family / parental control |
family.adguard-dns.com
|
AdGuard Family Protection — adds adult-content blocking and forces SafeSearch on top of the default ad/tracker blocking. |
2a10:50c0::bad1:ff
v6
|
AdGuard Family DNS_IPv6 | Family / parental control |
family.adguard-dns.com
|
AdGuard Family Protection, IPv6 — same service as the IPv4 row above. |
94.140.14.140
v4
|
AdGuard NoFilter DNS | Unfiltered |
unfiltered.adguard-dns.com
|
AdGuard NoFilter — same anycast network as AdGuard's other tiers, with all filtering turned off; a plain unfiltered resolver. |
2a10:50c0::1:ff
v6
|
AdGuard NoFilter DNS_IPv6 | Unfiltered |
unfiltered.adguard-dns.com
|
AdGuard NoFilter, IPv6 — same service as the IPv4 row above. |
76.223.122.150
v4
|
Alternate DNS | Blocks ads / trackers | — | Alternate DNS — free ad- and tracker-blocking resolver aimed at consumers who want pi-hole-style blocking without running their own server. |
76.76.19.19
v4
|
Alternate DNS | Blocks ads / trackers | — | Alternate DNS — free ad- and tracker-blocking resolver aimed at consumers who want pi-hole-style blocking without running their own server. |
2602:fcbc::ad
v6
|
Alternate DNS_IPv6 | Blocks ads / trackers | — | Alternate DNS, IPv6 — same service as the IPv4 Alternate DNS row above. |
2602:fcbc:2::ad
v6
|
Alternate DNS_IPv6 | Blocks ads / trackers | — | Alternate DNS, IPv6 — same service as the IPv4 Alternate DNS row above. |
149.112.121.10
v4
|
CIRA Canadian Shield | Unfiltered |
private.canadianshield.cira.ca
|
CIRA Canadian Shield, "Private" tier — free resolver from CIRA, Canada's .ca registry operator. This specific IP pair is the Private tier: DNS resolution only, NO malware/phishing filtering. CIRA's filtered Protected and Family tiers use different IPs (.121.20 / .121.30) not listed in this sheet. |
149.112.122.10
v4
|
CIRA Canadian Shield | Unfiltered |
private.canadianshield.cira.ca
|
CIRA Canadian Shield, "Private" tier — free resolver from CIRA, Canada's .ca registry operator. This specific IP pair is the Private tier: DNS resolution only, NO malware/phishing filtering. CIRA's filtered Protected and Family tiers use different IPs (.121.20 / .121.30) not listed in this sheet. |
185.228.168.9
v4
|
CleanBrowsing | Blocks malware / phishing |
security-filter.dns.cleanbrowsing.org
|
CleanBrowsing Security Filter — free tier that blocks malware, phishing, and spam domains only (no adult-content or family filtering on this specific IP pair). |
185.228.169.9
v4
|
CleanBrowsing | Blocks malware / phishing |
security-filter.dns.cleanbrowsing.org
|
CleanBrowsing Security Filter — free tier that blocks malware, phishing, and spam domains only (no adult-content or family filtering on this specific IP pair). |
185.228.168.10
v4
|
CleanBrowsing AntiAdult | Family / parental control |
adult-filter.dns.cleanbrowsing.org
|
CleanBrowsing Adult Filter — blocks adult/pornographic content plus proxy and VPN-bypass domains; does not block general malware. |
185.228.168.168
v4
|
CleanBrowsing Family | Family / parental control |
family-filter.dns.cleanbrowsing.org
|
CleanBrowsing Family Filter — CleanBrowsing's strictest free tier: adult content, mixed/unrated content, proxy and VPN-bypass domains, plus forced SafeSearch. |
2a0d:2a00:1::2
v6
|
CleanBrowsing_IPv6 | Blocks malware / phishing |
security-filter.dns.cleanbrowsing.org
|
CleanBrowsing Security Filter, IPv6 — same service as the IPv4 CleanBrowsing row above. |
2a0d:2a00:2::2
v6
|
CleanBrowsing_IPv6 | Blocks malware / phishing |
security-filter.dns.cleanbrowsing.org
|
CleanBrowsing Security Filter, IPv6 — same service as the IPv4 CleanBrowsing row above. |
1.0.0.1
v4
|
CloudFlare | Unfiltered |
cloudflare-dns.com
|
Cloudflare Public DNS — privacy-focused resolver, logs discarded within 24h, no content filtering on this IP pair. |
1.1.1.1
v4
|
CloudFlare | Unfiltered |
cloudflare-dns.com
|
Cloudflare Public DNS — privacy-focused resolver, logs discarded within 24h, no content filtering on this IP pair. |
2606:4700:4700::1001
v6
|
CloudFlare_IPv6 | Unfiltered |
cloudflare-dns.com
|
Cloudflare Public DNS, IPv6 — same service as the IPv4 Cloudflare row above. |
2606:4700:4700::1111
v6
|
CloudFlare_IPv6 | Unfiltered |
cloudflare-dns.com
|
Cloudflare Public DNS, IPv6 — same service as the IPv4 Cloudflare row above. |
8.20.247.20
v4
|
Comodo Secure DNS | Blocks malware / phishing | — | Comodo Secure DNS — legacy free resolver from Comodo (the security/antivirus vendor); blocks known malware and phishing domains. |
8.26.56.26
v4
|
Comodo Secure DNS | Blocks malware / phishing | — | Comodo Secure DNS — legacy free resolver from Comodo (the security/antivirus vendor); blocks known malware and phishing domains. |
76.76.10.0
v4
|
Control D | Unfiltered |
freedns.controld.com
|
Control D, free "p0" profile — Control D's no-filtering free tier (they also sell filtered profiles at other IPs, not this pair). |
76.76.2.0
v4
|
Control D | Unfiltered |
freedns.controld.com
|
Control D, free "p0" profile — Control D's no-filtering free tier (they also sell filtered profiles at other IPs, not this pair). |
2606:1a40::
v6
|
Control D_IPv6 | Unfiltered |
freedns.controld.com
|
Control D, free "p0" profile, IPv6 — same service as the IPv4 Control D row above. |
2606:1a40:1::
v6
|
Control D_IPv6 | Unfiltered |
freedns.controld.com
|
Control D, free "p0" profile, IPv6 — same service as the IPv4 Control D row above. |
78.47.64.161
v4
|
DNS for Family | Family / parental control |
dns-doh.dnsforfamily.com
|
DNS for Family — small independent free resolver aimed at family/parental-control filtering; supports DNSSEC. |
94.130.180.225
v4
|
DNS for Family | Family / parental control |
dns-doh.dnsforfamily.com
|
DNS for Family — small independent free resolver aimed at family/parental-control filtering; supports DNSSEC. |
216.146.35.35
v4
|
Dyn | Family / parental control | — | Dyn Internet Guide — legacy consumer resolver from Dyn (acquired by Oracle in 2016). Still answering queries under Oracle Cloud as of 2026, but effectively unmaintained as a consumer-facing product. |
216.146.36.36
v4
|
Dyn | Family / parental control | — | Dyn Internet Guide — legacy consumer resolver from Dyn (acquired by Oracle in 2016). Still answering queries under Oracle Cloud as of 2026, but effectively unmaintained as a consumer-facing product. |
80.80.80.80
v4
|
Freenom World | Unfiltered | — | Freenom World — free "anonymous" resolver launched by Freenom, the free-domain registrar. CAUTION for a domain-research tool specifically: Freenom stopped issuing new domains in 2023 amid litigation (Meta v. Freenom) over trademark abuse and malicious-domain complaints tied to its free TLDs (.tk/.ml/.ga/.cf/.gq). Using their resolver to help judge domain availability is an odd fit for this project even setting reliability aside. |
80.80.81.81
v4
|
Freenom World | Unfiltered | — | Freenom World — free "anonymous" resolver launched by Freenom, the free-domain registrar. CAUTION for a domain-research tool specifically: Freenom stopped issuing new domains in 2023 amid litigation (Meta v. Freenom) over trademark abuse and malicious-domain complaints tied to its free TLDs (.tk/.ml/.ga/.cf/.gq). Using their resolver to help judge domain availability is an odd fit for this project even setting reliability aside. |
8.8.4.4
v4
|
Unfiltered |
dns.google
|
Google Public DNS — global anycast resolver run by Google; DNSSEC-validating, logs discarded within 24–48h, no content filtering. | |
8.8.8.8
v4
|
Unfiltered |
dns.google
|
Google Public DNS — global anycast resolver run by Google; DNSSEC-validating, logs discarded within 24–48h, no content filtering. | |
2001:4860:4860::8844
v6
|
GoogleIPv6 | Unfiltered |
dns.google
|
Google Public DNS, IPv6 — same service and same FQDN as the IPv4 pair above. |
2001:4860:4860::8888
v6
|
GoogleIPv6 | Unfiltered |
dns.google
|
Google Public DNS, IPv6 — same service and same FQDN as the IPv4 pair above. |
74.82.42.42
v4
|
Hurricane Electric | Unfiltered |
ordns.he.net
|
Hurricane Electric — free recursive resolver run by the Fremont, CA network/hosting provider, offered alongside their free authoritative DNS hosting product. |
205.171.2.65
v4
|
Level3 | Unfiltered | — | Level 3 / CenturyLink / Lumen legacy resolver — never an officially documented public DNS product; historically left open on the network and used out of habit. Still answering as of 2026 but unsupported and undocumented — could disappear without notice. |
205.171.3.65
v4
|
Level3 | Unfiltered | — | Level 3 / CenturyLink / Lumen legacy resolver — never an officially documented public DNS product; historically left open on the network and used out of habit. Still answering as of 2026 but unsupported and undocumented — could disappear without notice. |
4.2.2.1
v4
|
Level3 | Unfiltered | — | Level 3 / CenturyLink / Lumen legacy resolver — never an officially documented public DNS product; historically left open on the network and used out of habit. Still answering as of 2026 but unsupported and undocumented — could disappear without notice. |
4.2.2.2
v4
|
Level3 | Unfiltered | — | Level 3 / CenturyLink / Lumen legacy resolver — never an officially documented public DNS product; historically left open on the network and used out of habit. Still answering as of 2026 but unsupported and undocumented — could disappear without notice. |
208.67.220.220
v4
|
OpenDNS Home | Blocks malware / phishing |
doh.opendns.com
|
OpenDNS Home (Cisco) — free consumer resolver. Blocks known phishing domains by default; more filtering (malware, adult, custom categories) is opt-in via a free OpenDNS account linked to your IP. |
208.67.222.222
v4
|
OpenDNS Home | Blocks malware / phishing |
doh.opendns.com
|
OpenDNS Home (Cisco) — free consumer resolver. Blocks known phishing domains by default; more filtering (malware, adult, custom categories) is opt-in via a free OpenDNS account linked to your IP. |
2620:119:35::35
v6
|
OpenDNS Home_IPv6 | Blocks malware / phishing |
doh.opendns.com
|
OpenDNS Home, IPv6 — same service as the IPv4 OpenDNS Home row above. |
2620:119:53::53
v6
|
OpenDNS Home_IPv6 | Blocks malware / phishing |
doh.opendns.com
|
OpenDNS Home, IPv6 — same service as the IPv4 OpenDNS Home row above. |
138.197.140.189
v4
|
OpenNIC | Unfiltered | — | OpenNIC — volunteer-run, community-governed alternative DNS network built around censorship resistance. These two IPs are individual Tier-2 member servers; uptime and behavior vary by the volunteer operator, not centrally guaranteed. |
168.235.111.72
v4
|
OpenNIC | Unfiltered | — | OpenNIC — volunteer-run, community-governed alternative DNS network built around censorship resistance. These two IPs are individual Tier-2 member servers; uptime and behavior vary by the volunteer operator, not centrally guaranteed. |
149.112.112.112
v4
|
Quad9 | Blocks malware / phishing |
dns.quad9.net
|
Quad9 (filtered) — free malware/phishing-blocking resolver run by the Quad9 Foundation (Swiss nonprofit). This IP pair is the FILTERED endpoint, not Quad9's unfiltered one. |
9.9.9.9
v4
|
Quad9 | Blocks malware / phishing |
dns.quad9.net
|
Quad9 (filtered) — free malware/phishing-blocking resolver run by the Quad9 Foundation (Swiss nonprofit). This IP pair is the FILTERED endpoint, not Quad9's unfiltered one. |
2620:fe::9
v6
|
Quad9_IPv6 | Blocks malware / phishing |
dns.quad9.net
|
Quad9 (filtered), IPv6 — same service as the IPv4 Quad9 row above. |
2620:fe::fe
v6
|
Quad9_IPv6 | Blocks malware / phishing |
dns.quad9.net
|
Quad9 (filtered), IPv6 — same service as the IPv4 Quad9 row above. |
77.88.8.1
v4
|
Yandex DNS | Unfiltered |
dns.yandex.net
|
Yandex DNS, "Basic" tier — the Russian search-engine company's free resolver. This pair is the unfiltered Basic tier; Yandex also runs filtered "Safe" and "Family" tiers at different IPs, not listed here. |
77.88.8.8
v4
|
Yandex DNS | Unfiltered |
dns.yandex.net
|
Yandex DNS, "Basic" tier — the Russian search-engine company's free resolver. This pair is the unfiltered Basic tier; Yandex also runs filtered "Safe" and "Family" tiers at different IPs, not listed here. |
A DoH endpoint is not necessarily usable from a web
page. That also requires the operator to send CORS
headers, which most public resolvers have no reason to do —
they run the service for system resolvers, routers and phones,
not browsers. The doh_hostname column says an
endpoint exists, not that your JavaScript can read its answer.
Filtering policy is each operator's own published wording, unedited. The coloured badge is our coarse summary of it — if the two ever disagree, believe the operator.