RoTunneling DoH: free DNS over HTTPS that blocks malware

RoTunneling DoH is a free, encrypted DNS service that blocks malware, phishing and scams before they load. It is free for everyone, RoTunneling customer or not, and works on any device and network without an account.

Address: https://dns.rotunneling.net/dns-query/public

Malware and Phishing Protection

Classic DNS travels unencrypted, so your provider or anyone on your network can see and change it. DNS over HTTPS encrypts every lookup, and our own system checks each one against our threat lists: if the destination is dangerous, the connection never starts.

What we block

• Phishing: fake pages that imitate banks, couriers, online shops, classifieds, payment services and email or social media accounts.
• Scams and fake shops: fraudulent investment sites, fake offers and shops that take your money and deliver nothing.
• Malware: servers that distribute viruses, trojans and ransomware.
• Command-and-control servers: an infected device is cut off, so it gets no commands and cannot send your data out.
• Malicious IP addresses: DNS answers that point to known malware or command-and-control servers are blocked too, even when the domain name is new.
• Malvertising: ad networks that spread malware on otherwise legitimate sites, plus aggressive pop-ups and redirects.
• Tracking and some intrusive ads: tracking and profiling servers and some intrusive ad networks.
• Hidden cryptomining: scripts that use your processor without your consent.
• Stalkerware: spy apps installed in secret that send out your messages, location and calls.
• Fake betting and casino sites: unlicensed gambling sites used for scams.

Where our lists come from

• National security teams (CERTs) in several countries, which publish the phishing and fraud domains found in real incidents.
• Vatra Sentinel, a Romanian AI-based system that analyses SSL certificates issued worldwide in real time and flags phishing and fraud sites the moment they go online.
• Specialised threat intelligence lists, maintained by security organisations and researchers.
• Lists of ad, tracking and malvertising networks.

Our lists are chosen so apps and sites keep working. The protection does not replace your antivirus: it is a complementary layer of prevention that stops threats before they reach you, while your antivirus protects the files and apps on your device. Use both.

How to set it up

Google Chrome

Settings > Privacy and security > Security > Use secure DNS > Select DNS provider: Add custom DNS service provider, then enter the address above.

Microsoft Edge

Settings > Privacy, search, and services > Security > Use secure DNS > Choose a service provider, then enter the address above.

Brave

Settings > Privacy and security > Security > Use secure DNS > Custom, then enter the address above.

Firefox

Settings > Privacy & Security > DNS over HTTPS > Increased Protection or Max Protection > Choose provider: Custom, then enter the address above.

iPhone, iPad and Mac

Download and install the configuration profile: dns.rotunneling.net-DOH.mobileconfig. On iPhone and iPad, install it from Settings > General > VPN & Device Management; on a Mac, from System Settings > Privacy & Security > Profiles. The whole device then uses RoTunneling DoH.

Android

Install an app that supports DNS over HTTPS, for example Nebulo, and add a server with the address above.

RoTunneling VPN users

Nothing to set up: while connected, the RoTunneling VPN apps use the same Malware and Phishing Protection by default. To turn it off, use Disable malware protection in the app settings.

• free doh
• dns over https
• doh
• secure dns
• anti malware
• anti phishing
• scam protection