AdShield

Adblocking DNS · September 2026

The DNS layer,
sorted.

21 free public resolvers that block ads, trackers, malware and adult content before a page even asks. Filter by what you need, copy the address, done.

21

providers

19

active now

5

protocols

21 match your current filter

Pick your shield

DoH latency · measured from your browser over HTTPS, includes connection setup · real device DNS may be faster

AdGuard DNS

AdGuard Software Limited

activeTier APlainDoHDoTDoQ
Ads
Trackers
Malware
Phishing
Family
Adult
—Social
*Custom
IPv4
DoH
DoT
DoQ

Control D

Windscribe ecosystem

activeTier APlainDoHDoT
Ads
Trackers
Malware
Phishing
Family
Adult
Social
Custom
IPv4
DoH
DoT

DNS4EU

European Union

activeTier APlainDoHDoT
Ads
—Trackers
Malware
Phishing
Family
Adult
—Social
—Custom
IPv4
DoH
DoT

CleanBrowsing

cleanbrowsing.org

activeTier APlainDoHDoT
*Ads
*Trackers
Malware
Phishing
Family
Adult
—Social
*Custom
IPv4

Ads & tracking filtering is configuration-dependent — the free Family resolver should not be assumed to block ads.

Not testable in browser

NextDNS

Personalized cloud DNS firewall

activeTier ADoHDoT
Ads
Trackers
Malware
Phishing
Family
Adult
Social
Custom

Creates a configuration-specific resolver endpoint for each user — set it up on nextdns.io.

Not testable in browser

BebasDNS

KINI / Indonesian community ecosystem · Indonesia

activeTier BDoHDoT
Ads
Trackers
Malware
Phishing
Family
Adult
—Social
Custom
DoH

NWPS.fi

Finland

activeTier BPlainDoHDoTDoQ
Ads
Trackers
Malware
Phishing
Family
Adult
—Social
—Custom
IPv4
DoH
DoT

HaGeZi DNS

EU

activeTier BDoHDoTDoQ
Ads
Trackers
Malware
Phishing
—Family
—Adult
—Social
*Custom
DoH
DoT
DoQ

LibreDNS

LibreOps · EU

activeTier BDoHDoT
Ads
Trackers
—Malware
—Phishing
—Family
—Adult
—Social
—Custom
DoH
DoT

Tiarap / Privacy-First DNS

tiar.app

activeTier BPlainDoHDoTDoQ
Ads
Trackers
Malware
Phishing
—Family
—Adult
—Social
—Custom
IPv4
IPv6
DoH
DoT
DoQ

AhaDNS

Independent public resolver

activeTier BDoHDoT
Ads
Trackers
Malware
Phishing
—Family
*Adult
—Social
*Custom
DoH
DoT

DNSWarden

Switzerland

activeTier BDoHDoTDoQDNSCrypt
Ads
Trackers
Malware
—Phishing
Family
Adult
—Social
Custom
Hostname
DoH

Comss.one

comss.one

activeDoHDoTDoQ
Ads
Trackers
Malware
Phishing
—Family
—Adult
—Social
—Custom
DoH
DoT
DoQ

114DNS

China

activePlain
Ads
—Trackers
Malware
Phishing
Family
Adult
—Social
—Custom
IPv4

Profiles are separated. Family + Adblock is not necessarily provided as a single resolver profile.

Not testable in browser

DNSGuard

Germany

activeTier CPlainDoHDoTDoQ
Ads
Trackers
Malware
Phishing
—Family
—Adult
—Social
—Custom
IPv4
IPv6
DoH
DoT
DoQ

DNS Forge

adminForge · Germany

activeTier CPlainDoHDoT
Ads
Trackers
Malware
Phishing
—Family
—Adult
—Social
—Custom
IPv4
IPv6
DoH
DoT

OSZX DNS

oszx.co

activeTier CPlainDoHDoTDNSCrypt
Ads
Trackers
—Malware
—Phishing
—Family
—Adult
—Social
—Custom
IPv4
IPv6
DoH
DoT

BlackMagicc DNS

Vietnam

activeTier CPlain
Ads
—Trackers
Malware
Phishing
Family
Adult
—Social
—Custom
IPv4
IPv6

Encrypted DNS support should not be assumed.

Not testable in browser

AdFreeDNS

Hobbyist public resolver

activeTier CPlainDoHDoT
Ads
Trackers
Malware
Phishing
—Family
—Adult
—Social
—Custom
Hostname
IPv4
DoH
DoT

Single-server / hobbyist infrastructure — treat redundancy as limited.

Xstl DNS

South Korea

verifyTier CPlainDoHDoT
Ads
Trackers
—Malware
—Phishing
—Family
—Adult
—Social
—Custom
IPv4

Encrypted endpoints have been reported as problematic. Low production priority, verification required.

Not testable in browser

Mullvad DNS

Mullvad Public Encrypted DNS · Sweden

retiringDoHDoT
Ads
Trackers
Malware
—Phishing
Family
Adult
Social
—Custom
Hostname
IPv4
IPv6
DoH
DoT

Public encrypted DNS shuts down November 2, 2026 — do not use as a new permanent dependency. IPs are for DoH/DoT only, not plain port 53. Old doh./dot.mullvad.net hostnames and 193.19.108.2/.3 are retired. Not recommended while on Mullvad VPN. DNS blocking cannot stop YouTube ads.

* depends on configuration, profile or subscription · click any provider for full details

Set it up

Two minutes, any device.

Chrome, Edge, Brave
  1. 01Open chrome://settings/security.
  2. 02Turn on Use secure DNS.
  3. 03Choose Custom and paste a DoH address.
Firefox
  1. 01Open about:preferences#privacy.
  2. 02Scroll to DNS over HTTPS, pick Max Protection.
  3. 03Choose Custom and paste a DoH address.
Android
  1. 01Settings → Network & internet → Private DNS.
  2. 02Pick Private DNS provider hostname.
  3. 03Paste the DoT hostname without tls://.
Windows, macOS, iOS
  1. 01Open your network adapter or Wi-Fi DNS settings.
  2. 02Replace the servers with the provider's IPv4 (and IPv6) addresses.
  3. 03Windows 11 can also set DNS over HTTPS per adapter.

Pair it with AdShield Pro

DNS stops the domain. AdShield stops the rest.

A DNS resolver can only refuse whole domains. AdShield Pro works inside the page — cosmetic filtering, redirect shield, anti-adblock defence — and its DNS Guard accepts any custom DoH address from this list.

Download AdShield ProTest your setup

Before you rely on one

  • Endpoints change. Every address here comes from a research snapshot dated September 2026.
  • A * means the feature depends on configuration, profile or subscription.
  • Mullvad DNS is retiring — public DNS shuts down November 2, 2026.
  • Xstl DNS encrypted endpoints are reported problematic and need verification.
  • “No logs” or “private” is a provider claim, not an independent verification.