List of Public DNS Servers

Adore.world states "...simple public blacklist to block...". This is an indication of manipulating query responses: https://threadmarkcyber.au/home/?page_id=3 For following explanations note: This is non compliant to RFC 4033 (DNSSEC) which is due to the absence of a cryptographic prove of none existence for the blocked (missing) domains. ↩

cleanbrowsing states "...Our security filter...". This implies the use of domain filtering/blacklisting and response manipulation: https://cleanbrowsing.org/help/docs/dnsovertls/ ↩

DNS for Family states "...that filter websites for family use...", "...protection from malware and blocking ads...". This implies domain filtering and response manipulation: https://dnsforfamily.com/ ↩

Comodo Secure DNS states "...domain filtering feature..." and is therefore capable of modifying query responses: https://securedns.dnsbycomodo.com/ ↩

dnsforge.de states "... is a censorship-free, safe and redundant DNS resolver without logging but with advertisement blocking" (translated by a native speaker). This is a reason to assume they modify query responses: https://dnsforge.de/ ↩

N-IX fails: dig dns-ga.de @194.8.57.12 returned status REFUSED. This probably means that the server does not answer recursive queries from the internet anymore. A delv dns-ga.de @194.8.57.12 with failed resolution approved of this theory. ↩

Cisco states all paid plans and free plans have "built-in protection". See: https://www.opendns.com/home-internet-security/. Even though the mentioned IPs do not block adult content, domain filtering can not be ruled out. Automated data collection, collecting IPs, sharing information with business partners and more makes it a clear case: https://www.opendns.com/privacy-policy/ ↩

Quad9 states "Quad9 blocks lookups of malicious host names from an up-to-the-minute list...". Therefore queries are analyzed and in some cases responses are modified. Further more, they provide services with either DNSSEC disabled or malware blocking: https://www.quad9.net/service/service-addresses-and-features ↩

Switch states "The DNS resolver service blocks domain names listed...", "Switch DNS Firewall blocks access to infected or malicious websites and redirects users to a landing page". This is not acceptable: https://www.switch.ch/en/switch-public-dns ↩

Yandex DNS states "...block adult-only and dangerous websites" (aka self-explanatory) : https://dns.yandex.com/. The mentioned IPs are from the "Safe" section. ↩

SafeDNS is full of marketing. The Terms of Service mention an interesting point (11), by which queries must be analyzed automatically and/or modified/filtered: https://www.safedns.com/terms-of-service. "Features" also include AI and web (aka domain) filtering: https://www.safedns.com/features#id-dns-security. ↩

Level 3 IP-Addresses are found online, but are not linked to any website that will provide information about logging, etc. Referred to in: https://www.publicdns.xyz/public/level3.html ↩

SKYDNS fails: dig www.dns-ga.de @193.58.251.251 timed out and delv dns-ga.de @193.58.251.251 resolution failed: SERVFAIL. ↩

New Nations fails: dig www.google.com @5.45.96.220 timed out and delv dns-ga.de NS @5.45.96.220 resolution failed: SERVFAIL. ↩

DNS0.EU Seems to work without issues in regular web browsing but YMMV. https://www.dns0.eu states "Integrated protection against millions of malicious domains..." ↩

DNS0.EU ZERO states "...hardened security for highly sensitive environments..." Filters malicious content, newly created domains, Top-level domains, DDNS domains ect. ↩

DNS0.EU KIDS states "...filtering out content from the Internet that is not suitable for children, you can provide a safe online environment for kids..." Filters adult websites, ads and other content not suitable for children. ↩