{
    "schema_version": 1,
    "generated_by": "DNS Lister v2.421.1",
    "generated_at": "2026-08-13T06:39:08+00:00",
    "description": "A directory of public DNS resolvers — IP addresses, filtering policy, and whether each one offers DNS-over-HTTPS. Free to download as CSV, JSON or XML.",
    "data_quality": "57 of these entries were compiled from each operator's public documentation and have not been checked against the resolver itself. Treat them as a starting point, not a measurement.",
    "notes": {
        "what_these_are": "Recursive resolvers: servers that will answer a query about ANY domain. Not authoritative\/managed DNS hosting (Route 53, Azure DNS, NS1 and similar), which answers only for zones hosted with that provider.",
        "filtering": "filtering_kind is a coarse bucket derived from the operator's own published policy. filtering is the operator's wording, unedited.",
        "doh_hostname": "Present only where the operator publishes a DNS-over-HTTPS endpoint. A DoH endpoint is NOT necessarily usable from a web page — that also requires CORS headers, which most public resolvers do not send."
    },
    "summary": {
        "total": 57,
        "v4": 39,
        "v6": 18,
        "with_doh": 41,
        "operators": 31
    },
    "html_url": "\/providers",
    "csv_url": "\/providers.csv",
    "xml_url": "\/providers.xml",
    "resolvers": [
        {
            "ip_address": "94.140.14.14",
            "ip_version": 4,
            "operator": "AdGuard DNS",
            "description": "AdGuard DNS (Default) — blocks ads and trackers network-wide; no adult-content or malware-specific filtering beyond that.",
            "filtering": "Filtered — ads\/trackers",
            "filtering_kind": "ads_trackers",
            "filtering_label": "Blocks ads \/ trackers",
            "doh_hostname": "dns.adguard-dns.com",
            "doh_notes": "dns.adguard-dns.com",
            "last_verified_at": null
        },
        {
            "ip_address": "94.140.15.15",
            "ip_version": 4,
            "operator": "AdGuard DNS",
            "description": "AdGuard DNS (Default) — blocks ads and trackers network-wide; no adult-content or malware-specific filtering beyond that.",
            "filtering": "Filtered — ads\/trackers",
            "filtering_kind": "ads_trackers",
            "filtering_label": "Blocks ads \/ trackers",
            "doh_hostname": "dns.adguard-dns.com",
            "doh_notes": "dns.adguard-dns.com",
            "last_verified_at": null
        },
        {
            "ip_address": "2a10:50c0::ad1:ff",
            "ip_version": 6,
            "operator": "AdGuard DNS_IPv6",
            "description": "AdGuard DNS (Default), IPv6 — same service as the IPv4 AdGuard DNS row above.",
            "filtering": "Filtered — ads\/trackers",
            "filtering_kind": "ads_trackers",
            "filtering_label": "Blocks ads \/ trackers",
            "doh_hostname": "dns.adguard-dns.com",
            "doh_notes": "dns.adguard-dns.com (same hostname as the IPv4 row)",
            "last_verified_at": null
        },
        {
            "ip_address": "2a10:50c0::ad2:ff",
            "ip_version": 6,
            "operator": "AdGuard DNS_IPv6",
            "description": "AdGuard DNS (Default), IPv6 — same service as the IPv4 AdGuard DNS row above.",
            "filtering": "Filtered — ads\/trackers",
            "filtering_kind": "ads_trackers",
            "filtering_label": "Blocks ads \/ trackers",
            "doh_hostname": "dns.adguard-dns.com",
            "doh_notes": "dns.adguard-dns.com (same hostname as the IPv4 row)",
            "last_verified_at": null
        },
        {
            "ip_address": "94.140.14.15",
            "ip_version": 4,
            "operator": "AdGuard Family DNS",
            "description": "AdGuard Family Protection — adds adult-content blocking and forces SafeSearch on top of the default ad\/tracker blocking.",
            "filtering": "Filtered — ads\/trackers + adult content + forced SafeSearch",
            "filtering_kind": "family",
            "filtering_label": "Family \/ parental control",
            "doh_hostname": "family.adguard-dns.com",
            "doh_notes": "family.adguard-dns.com",
            "last_verified_at": null
        },
        {
            "ip_address": "2a10:50c0::bad1:ff",
            "ip_version": 6,
            "operator": "AdGuard Family DNS_IPv6",
            "description": "AdGuard Family Protection, IPv6 — same service as the IPv4 row above.",
            "filtering": "Filtered — ads\/trackers + adult content + forced SafeSearch",
            "filtering_kind": "family",
            "filtering_label": "Family \/ parental control",
            "doh_hostname": "family.adguard-dns.com",
            "doh_notes": "family.adguard-dns.com (same hostname as the IPv4 row)",
            "last_verified_at": null
        },
        {
            "ip_address": "94.140.14.140",
            "ip_version": 4,
            "operator": "AdGuard NoFilter DNS",
            "description": "AdGuard NoFilter — same anycast network as AdGuard's other tiers, with all filtering turned off; a plain unfiltered resolver.",
            "filtering": "Unfiltered",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "unfiltered.adguard-dns.com",
            "doh_notes": "unfiltered.adguard-dns.com",
            "last_verified_at": null
        },
        {
            "ip_address": "2a10:50c0::1:ff",
            "ip_version": 6,
            "operator": "AdGuard NoFilter DNS_IPv6",
            "description": "AdGuard NoFilter, IPv6 — same service as the IPv4 row above.",
            "filtering": "Unfiltered",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "unfiltered.adguard-dns.com",
            "doh_notes": "unfiltered.adguard-dns.com (same hostname as the IPv4 row)",
            "last_verified_at": null
        },
        {
            "ip_address": "76.223.122.150",
            "ip_version": 4,
            "operator": "Alternate DNS",
            "description": "Alternate DNS — free ad- and tracker-blocking resolver aimed at consumers who want pi-hole-style blocking without running their own server.",
            "filtering": "Filtered — ads\/trackers",
            "filtering_kind": "ads_trackers",
            "filtering_label": "Blocks ads \/ trackers",
            "doh_hostname": null,
            "doh_notes": "No public DoH hostname found in their own setup documentation as of this research — only the raw IPs are published.",
            "last_verified_at": null
        },
        {
            "ip_address": "76.76.19.19",
            "ip_version": 4,
            "operator": "Alternate DNS",
            "description": "Alternate DNS — free ad- and tracker-blocking resolver aimed at consumers who want pi-hole-style blocking without running their own server.",
            "filtering": "Filtered — ads\/trackers",
            "filtering_kind": "ads_trackers",
            "filtering_label": "Blocks ads \/ trackers",
            "doh_hostname": null,
            "doh_notes": "No public DoH hostname found in their own setup documentation as of this research — only the raw IPs are published.",
            "last_verified_at": null
        },
        {
            "ip_address": "2602:fcbc::ad",
            "ip_version": 6,
            "operator": "Alternate DNS_IPv6",
            "description": "Alternate DNS, IPv6 — same service as the IPv4 Alternate DNS row above.",
            "filtering": "Filtered — ads\/trackers",
            "filtering_kind": "ads_trackers",
            "filtering_label": "Blocks ads \/ trackers",
            "doh_hostname": null,
            "doh_notes": "No public DoH hostname found (same as the IPv4 row).",
            "last_verified_at": null
        },
        {
            "ip_address": "2602:fcbc:2::ad",
            "ip_version": 6,
            "operator": "Alternate DNS_IPv6",
            "description": "Alternate DNS, IPv6 — same service as the IPv4 Alternate DNS row above.",
            "filtering": "Filtered — ads\/trackers",
            "filtering_kind": "ads_trackers",
            "filtering_label": "Blocks ads \/ trackers",
            "doh_hostname": null,
            "doh_notes": "No public DoH hostname found (same as the IPv4 row).",
            "last_verified_at": null
        },
        {
            "ip_address": "149.112.121.10",
            "ip_version": 4,
            "operator": "CIRA Canadian Shield",
            "description": "CIRA Canadian Shield, \"Private\" tier — free resolver from CIRA, Canada's .ca registry operator. This specific IP pair is the Private tier: DNS resolution only, NO malware\/phishing filtering. CIRA's filtered Protected and Family tiers use different IPs (.121.20 \/ .121.30) not listed in this sheet.",
            "filtering": "Unfiltered (\"Private\" tier — resolution only)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "private.canadianshield.cira.ca",
            "doh_notes": "private.canadianshield.cira.ca\/dns-query",
            "last_verified_at": null
        },
        {
            "ip_address": "149.112.122.10",
            "ip_version": 4,
            "operator": "CIRA Canadian Shield",
            "description": "CIRA Canadian Shield, \"Private\" tier — free resolver from CIRA, Canada's .ca registry operator. This specific IP pair is the Private tier: DNS resolution only, NO malware\/phishing filtering. CIRA's filtered Protected and Family tiers use different IPs (.121.20 \/ .121.30) not listed in this sheet.",
            "filtering": "Unfiltered (\"Private\" tier — resolution only)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "private.canadianshield.cira.ca",
            "doh_notes": "private.canadianshield.cira.ca\/dns-query",
            "last_verified_at": null
        },
        {
            "ip_address": "185.228.168.9",
            "ip_version": 4,
            "operator": "CleanBrowsing",
            "description": "CleanBrowsing Security Filter — free tier that blocks malware, phishing, and spam domains only (no adult-content or family filtering on this specific IP pair).",
            "filtering": "Filtered — malware\/phishing\/spam only",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": "security-filter.dns.cleanbrowsing.org",
            "doh_notes": "security-filter.dns.cleanbrowsing.org\/dns-query — inferred from CleanBrowsing's confirmed family-filter.dns.cleanbrowsing.org \/ adult-filter.dns.cleanbrowsing.org naming pattern (those two are confirmed; this one specifically was not, verify before relying on it).",
            "last_verified_at": null
        },
        {
            "ip_address": "185.228.169.9",
            "ip_version": 4,
            "operator": "CleanBrowsing",
            "description": "CleanBrowsing Security Filter — free tier that blocks malware, phishing, and spam domains only (no adult-content or family filtering on this specific IP pair).",
            "filtering": "Filtered — malware\/phishing\/spam only",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": "security-filter.dns.cleanbrowsing.org",
            "doh_notes": "security-filter.dns.cleanbrowsing.org\/dns-query — inferred from CleanBrowsing's confirmed family-filter.dns.cleanbrowsing.org \/ adult-filter.dns.cleanbrowsing.org naming pattern (those two are confirmed; this one specifically was not, verify before relying on it).",
            "last_verified_at": null
        },
        {
            "ip_address": "185.228.168.10",
            "ip_version": 4,
            "operator": "CleanBrowsing AntiAdult",
            "description": "CleanBrowsing Adult Filter — blocks adult\/pornographic content plus proxy and VPN-bypass domains; does not block general malware.",
            "filtering": "Filtered — adult content, proxies, VPN-bypass domains",
            "filtering_kind": "family",
            "filtering_label": "Family \/ parental control",
            "doh_hostname": "adult-filter.dns.cleanbrowsing.org",
            "doh_notes": "adult-filter.dns.cleanbrowsing.org\/dns-query",
            "last_verified_at": null
        },
        {
            "ip_address": "185.228.168.168",
            "ip_version": 4,
            "operator": "CleanBrowsing Family",
            "description": "CleanBrowsing Family Filter — CleanBrowsing's strictest free tier: adult content, mixed\/unrated content, proxy and VPN-bypass domains, plus forced SafeSearch.",
            "filtering": "Filtered — adult + mixed content + forced SafeSearch (strictest CleanBrowsing tier)",
            "filtering_kind": "family",
            "filtering_label": "Family \/ parental control",
            "doh_hostname": "family-filter.dns.cleanbrowsing.org",
            "doh_notes": "family-filter.dns.cleanbrowsing.org\/dns-query",
            "last_verified_at": null
        },
        {
            "ip_address": "2a0d:2a00:1::2",
            "ip_version": 6,
            "operator": "CleanBrowsing_IPv6",
            "description": "CleanBrowsing Security Filter, IPv6 — same service as the IPv4 CleanBrowsing row above.",
            "filtering": "Filtered — malware\/phishing\/spam only",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": "security-filter.dns.cleanbrowsing.org",
            "doh_notes": "security-filter.dns.cleanbrowsing.org\/dns-query (same caveat as the IPv4 row — pattern-inferred, not individually confirmed)",
            "last_verified_at": null
        },
        {
            "ip_address": "2a0d:2a00:2::2",
            "ip_version": 6,
            "operator": "CleanBrowsing_IPv6",
            "description": "CleanBrowsing Security Filter, IPv6 — same service as the IPv4 CleanBrowsing row above.",
            "filtering": "Filtered — malware\/phishing\/spam only",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": "security-filter.dns.cleanbrowsing.org",
            "doh_notes": "security-filter.dns.cleanbrowsing.org\/dns-query (same caveat as the IPv4 row — pattern-inferred, not individually confirmed)",
            "last_verified_at": null
        },
        {
            "ip_address": "1.0.0.1",
            "ip_version": 4,
            "operator": "CloudFlare",
            "description": "Cloudflare Public DNS — privacy-focused resolver, logs discarded within 24h, no content filtering on this IP pair.",
            "filtering": "Unfiltered",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "cloudflare-dns.com",
            "doh_notes": "cloudflare-dns.com or one.one.one.one (JSON API needs header Accept: application\/dns-json); the bare IP https:\/\/1.1.1.1\/dns-query also works directly because Cloudflare's certificate covers the IP literal — this is the one the DomainNameFinder team already found and used as an example.",
            "last_verified_at": null
        },
        {
            "ip_address": "1.1.1.1",
            "ip_version": 4,
            "operator": "CloudFlare",
            "description": "Cloudflare Public DNS — privacy-focused resolver, logs discarded within 24h, no content filtering on this IP pair.",
            "filtering": "Unfiltered",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "cloudflare-dns.com",
            "doh_notes": "cloudflare-dns.com or one.one.one.one (JSON API needs header Accept: application\/dns-json); the bare IP https:\/\/1.1.1.1\/dns-query also works directly because Cloudflare's certificate covers the IP literal — this is the one the DomainNameFinder team already found and used as an example.",
            "last_verified_at": null
        },
        {
            "ip_address": "2606:4700:4700::1001",
            "ip_version": 6,
            "operator": "CloudFlare_IPv6",
            "description": "Cloudflare Public DNS, IPv6 — same service as the IPv4 Cloudflare row above.",
            "filtering": "Unfiltered",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "cloudflare-dns.com",
            "doh_notes": "cloudflare-dns.com \/ one.one.one.one (same hostname as the IPv4 row)",
            "last_verified_at": null
        },
        {
            "ip_address": "2606:4700:4700::1111",
            "ip_version": 6,
            "operator": "CloudFlare_IPv6",
            "description": "Cloudflare Public DNS, IPv6 — same service as the IPv4 Cloudflare row above.",
            "filtering": "Unfiltered",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "cloudflare-dns.com",
            "doh_notes": "cloudflare-dns.com \/ one.one.one.one (same hostname as the IPv4 row)",
            "last_verified_at": null
        },
        {
            "ip_address": "8.20.247.20",
            "ip_version": 4,
            "operator": "Comodo Secure DNS",
            "description": "Comodo Secure DNS — legacy free resolver from Comodo (the security\/antivirus vendor); blocks known malware and phishing domains.",
            "filtering": "Filtered — malware\/phishing",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": null,
            "doh_notes": "No — confirmed Comodo does not offer DoH or DoT for this service; plain UDP\/TCP port 53 only.",
            "last_verified_at": null
        },
        {
            "ip_address": "8.26.56.26",
            "ip_version": 4,
            "operator": "Comodo Secure DNS",
            "description": "Comodo Secure DNS — legacy free resolver from Comodo (the security\/antivirus vendor); blocks known malware and phishing domains.",
            "filtering": "Filtered — malware\/phishing",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": null,
            "doh_notes": "No — confirmed Comodo does not offer DoH or DoT for this service; plain UDP\/TCP port 53 only.",
            "last_verified_at": null
        },
        {
            "ip_address": "76.76.10.0",
            "ip_version": 4,
            "operator": "Control D",
            "description": "Control D, free \"p0\" profile — Control D's no-filtering free tier (they also sell filtered profiles at other IPs, not this pair).",
            "filtering": "Unfiltered (this is the \"p0\" free\/unfiltered profile)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "freedns.controld.com",
            "doh_notes": "freedns.controld.com\/p0 (JSON-style DoH; also does DoT\/DoQ at p0.freedns.controld.com)",
            "last_verified_at": null
        },
        {
            "ip_address": "76.76.2.0",
            "ip_version": 4,
            "operator": "Control D",
            "description": "Control D, free \"p0\" profile — Control D's no-filtering free tier (they also sell filtered profiles at other IPs, not this pair).",
            "filtering": "Unfiltered (this is the \"p0\" free\/unfiltered profile)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "freedns.controld.com",
            "doh_notes": "freedns.controld.com\/p0 (JSON-style DoH; also does DoT\/DoQ at p0.freedns.controld.com)",
            "last_verified_at": null
        },
        {
            "ip_address": "2606:1a40::",
            "ip_version": 6,
            "operator": "Control D_IPv6",
            "description": "Control D, free \"p0\" profile, IPv6 — same service as the IPv4 Control D row above.",
            "filtering": "Unfiltered (this is the \"p0\" free\/unfiltered profile)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "freedns.controld.com",
            "doh_notes": "freedns.controld.com\/p0 (same endpoint as the IPv4 row)",
            "last_verified_at": null
        },
        {
            "ip_address": "2606:1a40:1::",
            "ip_version": 6,
            "operator": "Control D_IPv6",
            "description": "Control D, free \"p0\" profile, IPv6 — same service as the IPv4 Control D row above.",
            "filtering": "Unfiltered (this is the \"p0\" free\/unfiltered profile)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "freedns.controld.com",
            "doh_notes": "freedns.controld.com\/p0 (same endpoint as the IPv4 row)",
            "last_verified_at": null
        },
        {
            "ip_address": "78.47.64.161",
            "ip_version": 4,
            "operator": "DNS for Family",
            "description": "DNS for Family — small independent free resolver aimed at family\/parental-control filtering; supports DNSSEC.",
            "filtering": "Filtered — family\/parental-control",
            "filtering_kind": "family",
            "filtering_label": "Family \/ parental control",
            "doh_hostname": "dns-doh.dnsforfamily.com",
            "doh_notes": "dns-doh.dnsforfamily.com\/dns-query",
            "last_verified_at": null
        },
        {
            "ip_address": "94.130.180.225",
            "ip_version": 4,
            "operator": "DNS for Family",
            "description": "DNS for Family — small independent free resolver aimed at family\/parental-control filtering; supports DNSSEC.",
            "filtering": "Filtered — family\/parental-control",
            "filtering_kind": "family",
            "filtering_label": "Family \/ parental control",
            "doh_hostname": "dns-doh.dnsforfamily.com",
            "doh_notes": "dns-doh.dnsforfamily.com\/dns-query",
            "last_verified_at": null
        },
        {
            "ip_address": "216.146.35.35",
            "ip_version": 4,
            "operator": "Dyn",
            "description": "Dyn Internet Guide — legacy consumer resolver from Dyn (acquired by Oracle in 2016). Still answering queries under Oracle Cloud as of 2026, but effectively unmaintained as a consumer-facing product.",
            "filtering": "Reportedly filtered by default in the original \"Internet Guide\" product (blocked malicious\/adult sites unless disabled in account settings); current behavior unconfirmed given the service's legacy status.",
            "filtering_kind": "family",
            "filtering_label": "Family \/ parental control",
            "doh_hostname": null,
            "doh_notes": "No — resolver1.dyndnsinternetguide.com \/ resolver2.dyndnsinternetguide.com are classic reverse-hostnames for the plain DNS service, not DoH endpoints.",
            "last_verified_at": null
        },
        {
            "ip_address": "216.146.36.36",
            "ip_version": 4,
            "operator": "Dyn",
            "description": "Dyn Internet Guide — legacy consumer resolver from Dyn (acquired by Oracle in 2016). Still answering queries under Oracle Cloud as of 2026, but effectively unmaintained as a consumer-facing product.",
            "filtering": "Reportedly filtered by default in the original \"Internet Guide\" product (blocked malicious\/adult sites unless disabled in account settings); current behavior unconfirmed given the service's legacy status.",
            "filtering_kind": "family",
            "filtering_label": "Family \/ parental control",
            "doh_hostname": null,
            "doh_notes": "No — resolver1.dyndnsinternetguide.com \/ resolver2.dyndnsinternetguide.com are classic reverse-hostnames for the plain DNS service, not DoH endpoints.",
            "last_verified_at": null
        },
        {
            "ip_address": "80.80.80.80",
            "ip_version": 4,
            "operator": "Freenom World",
            "description": "Freenom World — free \"anonymous\" resolver launched by Freenom, the free-domain registrar. CAUTION for a domain-research tool specifically: Freenom stopped issuing new domains in 2023 amid litigation (Meta v. Freenom) over trademark abuse and malicious-domain complaints tied to its free TLDs (.tk\/.ml\/.ga\/.cf\/.gq). Using their resolver to help judge domain availability is an odd fit for this project even setting reliability aside.",
            "filtering": "Unfiltered (as claimed by the operator)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": null,
            "doh_notes": "No public DoH hostname found in documentation.",
            "last_verified_at": null
        },
        {
            "ip_address": "80.80.81.81",
            "ip_version": 4,
            "operator": "Freenom World",
            "description": "Freenom World — free \"anonymous\" resolver launched by Freenom, the free-domain registrar. CAUTION for a domain-research tool specifically: Freenom stopped issuing new domains in 2023 amid litigation (Meta v. Freenom) over trademark abuse and malicious-domain complaints tied to its free TLDs (.tk\/.ml\/.ga\/.cf\/.gq). Using their resolver to help judge domain availability is an odd fit for this project even setting reliability aside.",
            "filtering": "Unfiltered (as claimed by the operator)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": null,
            "doh_notes": "No public DoH hostname found in documentation.",
            "last_verified_at": null
        },
        {
            "ip_address": "8.8.4.4",
            "ip_version": 4,
            "operator": "Google",
            "description": "Google Public DNS — global anycast resolver run by Google; DNSSEC-validating, logs discarded within 24–48h, no content filtering.",
            "filtering": "Unfiltered",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "dns.google",
            "doh_notes": "dns.google (JSON: https:\/\/dns.google\/resolve?name=...; also answers RFC 8484 wire-format DoH)",
            "last_verified_at": null
        },
        {
            "ip_address": "8.8.8.8",
            "ip_version": 4,
            "operator": "Google",
            "description": "Google Public DNS — global anycast resolver run by Google; DNSSEC-validating, logs discarded within 24–48h, no content filtering.",
            "filtering": "Unfiltered",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "dns.google",
            "doh_notes": "dns.google (JSON: https:\/\/dns.google\/resolve?name=...; also answers RFC 8484 wire-format DoH)",
            "last_verified_at": null
        },
        {
            "ip_address": "2001:4860:4860::8844",
            "ip_version": 6,
            "operator": "GoogleIPv6",
            "description": "Google Public DNS, IPv6 — same service and same FQDN as the IPv4 pair above.",
            "filtering": "Unfiltered",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "dns.google",
            "doh_notes": "dns.google (same hostname as the IPv4 rows — it is dual-stack)",
            "last_verified_at": null
        },
        {
            "ip_address": "2001:4860:4860::8888",
            "ip_version": 6,
            "operator": "GoogleIPv6",
            "description": "Google Public DNS, IPv6 — same service and same FQDN as the IPv4 pair above.",
            "filtering": "Unfiltered",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "dns.google",
            "doh_notes": "dns.google (same hostname as the IPv4 rows — it is dual-stack)",
            "last_verified_at": null
        },
        {
            "ip_address": "74.82.42.42",
            "ip_version": 4,
            "operator": "Hurricane Electric",
            "description": "Hurricane Electric — free recursive resolver run by the Fremont, CA network\/hosting provider, offered alongside their free authoritative DNS hosting product.",
            "filtering": "Unfiltered",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "ordns.he.net",
            "doh_notes": "ordns.he.net\/dns-query",
            "last_verified_at": null
        },
        {
            "ip_address": "205.171.2.65",
            "ip_version": 4,
            "operator": "Level3",
            "description": "Level 3 \/ CenturyLink \/ Lumen legacy resolver — never an officially documented public DNS product; historically left open on the network and used out of habit. Still answering as of 2026 but unsupported and undocumented — could disappear without notice.",
            "filtering": "Unfiltered (no known filtering, but also no official policy of any kind)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": null,
            "doh_notes": "No — no DoH endpoint has ever existed for this service; UDP\/TCP port 53 only.",
            "last_verified_at": null
        },
        {
            "ip_address": "205.171.3.65",
            "ip_version": 4,
            "operator": "Level3",
            "description": "Level 3 \/ CenturyLink \/ Lumen legacy resolver — never an officially documented public DNS product; historically left open on the network and used out of habit. Still answering as of 2026 but unsupported and undocumented — could disappear without notice.",
            "filtering": "Unfiltered (no known filtering, but also no official policy of any kind)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": null,
            "doh_notes": "No — no DoH endpoint has ever existed for this service; UDP\/TCP port 53 only.",
            "last_verified_at": null
        },
        {
            "ip_address": "4.2.2.1",
            "ip_version": 4,
            "operator": "Level3",
            "description": "Level 3 \/ CenturyLink \/ Lumen legacy resolver — never an officially documented public DNS product; historically left open on the network and used out of habit. Still answering as of 2026 but unsupported and undocumented — could disappear without notice.",
            "filtering": "Unfiltered (no known filtering, but also no official policy of any kind)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": null,
            "doh_notes": "No — no DoH endpoint has ever existed for this service; UDP\/TCP port 53 only.",
            "last_verified_at": null
        },
        {
            "ip_address": "4.2.2.2",
            "ip_version": 4,
            "operator": "Level3",
            "description": "Level 3 \/ CenturyLink \/ Lumen legacy resolver — never an officially documented public DNS product; historically left open on the network and used out of habit. Still answering as of 2026 but unsupported and undocumented — could disappear without notice.",
            "filtering": "Unfiltered (no known filtering, but also no official policy of any kind)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": null,
            "doh_notes": "No — no DoH endpoint has ever existed for this service; UDP\/TCP port 53 only.",
            "last_verified_at": null
        },
        {
            "ip_address": "208.67.220.220",
            "ip_version": 4,
            "operator": "OpenDNS Home",
            "description": "OpenDNS Home (Cisco) — free consumer resolver. Blocks known phishing domains by default; more filtering (malware, adult, custom categories) is opt-in via a free OpenDNS account linked to your IP.",
            "filtering": "Filtered — phishing protection on by default; more filtering optional via account",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": "doh.opendns.com",
            "doh_notes": "doh.opendns.com (RFC 8484 wire-format only, no JSON API — needs the Accept: application\/dns-message header, which forces a CORS preflight in a browser)",
            "last_verified_at": null
        },
        {
            "ip_address": "208.67.222.222",
            "ip_version": 4,
            "operator": "OpenDNS Home",
            "description": "OpenDNS Home (Cisco) — free consumer resolver. Blocks known phishing domains by default; more filtering (malware, adult, custom categories) is opt-in via a free OpenDNS account linked to your IP.",
            "filtering": "Filtered — phishing protection on by default; more filtering optional via account",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": "doh.opendns.com",
            "doh_notes": "doh.opendns.com (RFC 8484 wire-format only, no JSON API — needs the Accept: application\/dns-message header, which forces a CORS preflight in a browser)",
            "last_verified_at": null
        },
        {
            "ip_address": "2620:119:35::35",
            "ip_version": 6,
            "operator": "OpenDNS Home_IPv6",
            "description": "OpenDNS Home, IPv6 — same service as the IPv4 OpenDNS Home row above.",
            "filtering": "Filtered — phishing protection on by default; more filtering optional via account",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": "doh.opendns.com",
            "doh_notes": "doh.opendns.com (same hostname as the IPv4 row)",
            "last_verified_at": null
        },
        {
            "ip_address": "2620:119:53::53",
            "ip_version": 6,
            "operator": "OpenDNS Home_IPv6",
            "description": "OpenDNS Home, IPv6 — same service as the IPv4 OpenDNS Home row above.",
            "filtering": "Filtered — phishing protection on by default; more filtering optional via account",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": "doh.opendns.com",
            "doh_notes": "doh.opendns.com (same hostname as the IPv4 row)",
            "last_verified_at": null
        },
        {
            "ip_address": "138.197.140.189",
            "ip_version": 4,
            "operator": "OpenNIC",
            "description": "OpenNIC — volunteer-run, community-governed alternative DNS network built around censorship resistance. These two IPs are individual Tier-2 member servers; uptime and behavior vary by the volunteer operator, not centrally guaranteed.",
            "filtering": "Unfiltered by philosophy, but not centrally guaranteed (volunteer-run, no SLA)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": null,
            "doh_notes": "No standard public DoH endpoint. 138.197.140.189 does have an internal OpenNIC hostname (ns12.ca.dns.opennic.glue), but that only resolves for OpenNIC-aware resolvers — it is not a browser-usable HTTPS URL.",
            "last_verified_at": null
        },
        {
            "ip_address": "168.235.111.72",
            "ip_version": 4,
            "operator": "OpenNIC",
            "description": "OpenNIC — volunteer-run, community-governed alternative DNS network built around censorship resistance. These two IPs are individual Tier-2 member servers; uptime and behavior vary by the volunteer operator, not centrally guaranteed.",
            "filtering": "Unfiltered by philosophy, but not centrally guaranteed (volunteer-run, no SLA)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": null,
            "doh_notes": "No standard public DoH endpoint. 138.197.140.189 does have an internal OpenNIC hostname (ns12.ca.dns.opennic.glue), but that only resolves for OpenNIC-aware resolvers — it is not a browser-usable HTTPS URL.",
            "last_verified_at": null
        },
        {
            "ip_address": "149.112.112.112",
            "ip_version": 4,
            "operator": "Quad9",
            "description": "Quad9 (filtered) — free malware\/phishing-blocking resolver run by the Quad9 Foundation (Swiss nonprofit). This IP pair is the FILTERED endpoint, not Quad9's unfiltered one.",
            "filtering": "Filtered — blocks malware\/phishing domains",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": "dns.quad9.net",
            "doh_notes": "dns.quad9.net (RFC 8484 wire-format DoH). Quad9's UNFILTERED variant is a different IP\/hostname (9.9.9.10 \/ dns10.quad9.net) and is not one of the IPs in this sheet.",
            "last_verified_at": null
        },
        {
            "ip_address": "9.9.9.9",
            "ip_version": 4,
            "operator": "Quad9",
            "description": "Quad9 (filtered) — free malware\/phishing-blocking resolver run by the Quad9 Foundation (Swiss nonprofit). This IP pair is the FILTERED endpoint, not Quad9's unfiltered one.",
            "filtering": "Filtered — blocks malware\/phishing domains",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": "dns.quad9.net",
            "doh_notes": "dns.quad9.net (RFC 8484 wire-format DoH). Quad9's UNFILTERED variant is a different IP\/hostname (9.9.9.10 \/ dns10.quad9.net) and is not one of the IPs in this sheet.",
            "last_verified_at": null
        },
        {
            "ip_address": "2620:fe::9",
            "ip_version": 6,
            "operator": "Quad9_IPv6",
            "description": "Quad9 (filtered), IPv6 — same service as the IPv4 Quad9 row above.",
            "filtering": "Filtered — blocks malware\/phishing domains",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": "dns.quad9.net",
            "doh_notes": "dns.quad9.net (same hostname as the IPv4 row)",
            "last_verified_at": null
        },
        {
            "ip_address": "2620:fe::fe",
            "ip_version": 6,
            "operator": "Quad9_IPv6",
            "description": "Quad9 (filtered), IPv6 — same service as the IPv4 Quad9 row above.",
            "filtering": "Filtered — blocks malware\/phishing domains",
            "filtering_kind": "malware_phishing",
            "filtering_label": "Blocks malware \/ phishing",
            "doh_hostname": "dns.quad9.net",
            "doh_notes": "dns.quad9.net (same hostname as the IPv4 row)",
            "last_verified_at": null
        },
        {
            "ip_address": "77.88.8.1",
            "ip_version": 4,
            "operator": "Yandex DNS",
            "description": "Yandex DNS, \"Basic\" tier — the Russian search-engine company's free resolver. This pair is the unfiltered Basic tier; Yandex also runs filtered \"Safe\" and \"Family\" tiers at different IPs, not listed here.",
            "filtering": "Unfiltered (\"Basic\" tier)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "dns.yandex.net",
            "doh_notes": "dns.yandex.net\/dns-query (RFC 8484 wire-format DoH)",
            "last_verified_at": null
        },
        {
            "ip_address": "77.88.8.8",
            "ip_version": 4,
            "operator": "Yandex DNS",
            "description": "Yandex DNS, \"Basic\" tier — the Russian search-engine company's free resolver. This pair is the unfiltered Basic tier; Yandex also runs filtered \"Safe\" and \"Family\" tiers at different IPs, not listed here.",
            "filtering": "Unfiltered (\"Basic\" tier)",
            "filtering_kind": "unfiltered",
            "filtering_label": "Unfiltered",
            "doh_hostname": "dns.yandex.net",
            "doh_notes": "dns.yandex.net\/dns-query (RFC 8484 wire-format DoH)",
            "last_verified_at": null
        }
    ]
}