checking… · uptime & status →

Private, encrypted DNS —
nothing logged.

dns.akxl.io

DoH, DoH3, DoT and DoQ, plus DNSCrypt on a single hostname. DNSSEC-validated, 0x20, no ECS, fully recursive, and no plaintext port 53.

5 transports~1.4M domains blocked0 logsDNSSEC validated

up 14d 3h · 38% cached · 100.0% ok

Unfiltered plain encrypted DNS
DoHhttps://dns.akxl.io/dns-query
DoH3h3://dns.akxl.io/dns-query
DoTtls://dns.akxl.io:853
DoQquic://dns.akxl.io:853
DNSCrypt185.190.58.185:84432.dnscrypt-cert.dns.akxl.io
DNS stamps — one-paste import (dnscrypt-proxy, AdGuard…)

The DoH stamp also covers DoH3 (HTTP/3).

DoHsdns://AgcAAAAAAAAADjE4NS4xOTAuNTguMTg1AAtkbnMuYWt4bC5pbwovZG5zLXF1ZXJ5
DoTsdns://AwcAAAAAAAAADjE4NS4xOTAuNTguMTg1AAtkbnMuYWt4bC5pbw
DoQsdns://BAcAAAAAAAAADjE4NS4xOTAuNTguMTg1AAtkbnMuYWt4bC5pbw
DNSCryptsdns://AQcAAAAAAAAAEzE4NS4xOTAuNTguMTg1Ojg0NDMg5EkiFsT5BspPfNlCSa3tccL2PyoVS79D-GaOVgZSNlgbMi5kbnNjcnlwdC1jZXJ0LmRucy5ha3hsLmlv
Security blocks ~1.4M malware, phishing & tracker domains
DoHhttps://security.dns.akxl.io/dns-query
DoH3h3://security.dns.akxl.io/dns-query
DoTtls://security.dns.akxl.io:853
DoQquic://security.dns.akxl.io:853
DNSCrypt185.190.58.185:84442.dnscrypt-cert.security.dns.akxl.io
DNS stamps — one-paste import

The DoH stamp also covers DoH3 (HTTP/3).

DoHsdns://AgMAAAAAAAAADjE4NS4xOTAuNTguMTg1ABRzZWN1cml0eS5kbnMuYWt4bC5pbwovZG5zLXF1ZXJ5
DoTsdns://AwMAAAAAAAAADjE4NS4xOTAuNTguMTg1ABRzZWN1cml0eS5kbnMuYWt4bC5pbw
DoQsdns://BAMAAAAAAAAADjE4NS4xOTAuNTguMTg1ABRzZWN1cml0eS5kbnMuYWt4bC5pbw
DNSCryptsdns://AQMAAAAAAAAAEzE4NS4xOTAuNTguMTg1Ojg0NDQg5EkiFsT5BspPfNlCSa3tccL2PyoVS79D-GaOVgZSNlgkMi5kbnNjcnlwdC1jZXJ0LnNlY3VyaXR5LmRucy5ha3hsLmlv
Direct IP bare-IP DoT / DoQ & bootstrap
IPv4185.190.58.185DoT / DoQ :853
IPv62401:a4a0:2:260::185DoT / DoQ :853
Bootstrap185.190.58.185#dns.akxl.io
Built in
No logs
No queries or client IPs stored; no EDNS Client Subnet sent upstream.
DNSSEC & 0x20
Answers are DNSSEC-validated and upstream queries use 0x20 case randomization — forged or spoofed replies are rejected, not relayed.
Encrypted only
DoH, DoH3, DoT, and DoQ, plus DNSCrypt — never plaintext DNS.
Threat blocking
Malware, phishing, and scam domains refused on the security endpoint.
Trackers & telemetry
EasyPrivacy lists cut analytics and background telemetry.
Gambling filter
Optional judol / gambling blocking on the security endpoint.
Download App
Set up on your devices — Apple, Android, Windows, Linux, browser, router
Apple configuration profilesecurity profile

Same address everywhere. For the security resolver, swap in security.dns.akxl.io.

Android 9+dns.akxl.ioSettings → Network & internet → Private DNS → enter the hostname
Windows 11https://dns.akxl.io/dns-querySettings → Network → Edit DNS → Manual → Encrypted only (DoH)
Browserhttps://dns.akxl.io/dns-querySecure DNS / DoH → custom provider (Chrome, Edge, Firefox, Brave)
Routertls://dns.akxl.ioDNS-over-TLS on port 853, where supported
Linuxtls://dns.akxl.iosystemd-resolved: DNS=<server-ip>#dns.akxl.io + DNSOverTLS=yes in /etc/systemd/resolved.conf
Is a domain blocked?

Verify
kdig +tls @dns.akxl.io example.comkdig +https @dns.akxl.io example.comkdig +tls +dnssec @dns.akxl.io ietf.org