DNS resolver registry · measured 2026-09-24
Family and malware-filtering public DNS servers
Many operators run separate addresses that refuse to resolve known malicious, advertising or adult domains. The descriptions below are each operator's own. We did not test how completely any filter blocks what it promises.
Filtered variants
28 filtered variants from 10 operators
| Resolver | Variant | Blocks (operator description) | IPv4 | Encrypted |
|---|---|---|---|---|
| Cloudflare 1.1.1.1 | 1.1.1.1 for Families: malware | Malware | 1.1.1.2, 1.0.0.2 | |
| Cloudflare 1.1.1.1 | 1.1.1.1 for Families: malware and adult | Malware and adult content | 1.1.1.3, 1.0.0.3 | |
| Quad9 | Quad9 (recommended) | Malware blocking | 9.9.9.9, 149.112.112.112 | DoHDoT |
| Quad9 | Quad9 secured with ECS | Malware blocking | 9.9.9.11, 149.112.112.11 | DoHDoT |
| AdGuard DNS | AdGuard DNS default | Ads, tracking and phishing | 94.140.14.14, 94.140.15.15 | DoHDoT |
| AdGuard DNS | AdGuard DNS family protection | Default filtering, adult websites and safe search | 94.140.14.15, 94.140.15.16 | DoHDoT |
| CleanBrowsing | CleanBrowsing Security Filter | Phishing, spam, malware and malicious domains | 185.228.168.9, 185.228.169.9 | DoHDoT |
| CleanBrowsing | CleanBrowsing Adult Filter | Adult content, plus the Security Filter | 185.228.168.10, 185.228.169.11 | DoHDoT |
| CleanBrowsing | CleanBrowsing Family Filter | Adult content, proxy and VPN domains, and mixed-content sites | 185.228.168.168, 185.228.169.168 | DoHDoT |
| Control D Free DNS | Malware | Known dangerous sites | 76.76.2.1, 76.76.10.1 | DoHDoT |
| Control D Free DNS | Ads & Tracking | Malware, ads and trackers | 76.76.2.2, 76.76.10.2 | DoHDoT |
| Control D Free DNS | Social | Major social media apps and sites | 76.76.2.3, 76.76.10.3 | DoHDoT |
| Control D Free DNS | Family Friendly | Malware, ads, trackers, adult content and drug sites | 76.76.2.4, 76.76.10.4 | DoHDoT |
| Mullvad DNS | Mullvad adblock | Ads and trackers | 194.242.2.3 | DoHDoT |
| Mullvad DNS | Mullvad base | Ads, trackers and malware | 194.242.2.4 | DoHDoT |
| Mullvad DNS | Mullvad extended | Ads, trackers, malware and social media | 194.242.2.5 | DoHDoT |
| Mullvad DNS | Mullvad family | Ads, trackers, malware, adult content and gambling | 194.242.2.6 | DoHDoT |
| Mullvad DNS | Mullvad all | Ads, trackers, malware, adult content, gambling and social media | 194.242.2.9 | DoHDoT |
| Yandex DNS | Yandex DNS Safe | Dangerous websites | 77.88.8.88, 77.88.8.2 | DoT |
| Yandex DNS | Yandex DNS Family | Dangerous websites and adult content | 77.88.8.7, 77.88.8.3 | DoT |
| 114DNS | 114DNS safe | Phishing, virus and trojan sites | 114.114.114.119, 114.114.115.119 | |
| 114DNS | 114DNS family | Pornographic sites | 114.114.114.110, 114.114.115.110 | |
| CIRA Canadian Shield | Canadian Shield Protected | Malware, phishing, botnets and online scams | 149.112.121.20, 149.112.122.20 | DoHDoT |
| CIRA Canadian Shield | Canadian Shield Family | Everything in Protected, plus adult content | 149.112.121.30, 149.112.122.30 | DoHDoT |
| DNS4EU | Protective | Malware, phishing and command-and-control domains | 86.54.11.1, 86.54.11.201 | DoHDoT |
| DNS4EU | Protective with child protection | Protective, plus content not appropriate for children | 86.54.11.12, 86.54.11.212 | DoHDoT |
| DNS4EU | Protective with ad blocking | Protective, plus advertising and tracking domains | 86.54.11.13, 86.54.11.213 | DoHDoT |
| DNS4EU | Protective with child protection and ad blocking | Protective, plus child protection and ad blocking | 86.54.11.11, 86.54.11.211 | DoHDoT |
Questions
Common questions
Is a family DNS filter enough to protect children?
It blocks domains on the operator’s lists when a device uses that resolver. A device or app configured with a different resolver, or with its own encrypted DNS, bypasses it.
Which DNS servers block adult content for free?
Operators in this registry whose own description of a free variant mentions adult or pornographic content: Cloudflare 1.1.1.1, AdGuard DNS, CleanBrowsing, Control D Free DNS, Mullvad DNS, Yandex DNS, 114DNS, CIRA Canadian Shield. Each operator page lists the addresses.
More lists
Other ways to compare
Research library
Network registries & open data
Find the reference behind a network decision. Browse the records, follow their sources and download the available datasets.