Skip to content

Three ways to use Protect

Pick by what you want to protect: one browser, the whole device or every app.

  • Browser extension

    Protects
    The browser you install it in
    How to start
    One click, from your browser's store
    Cost
    Free, no account

    Chrome, Edge, Firefox, Brave, Vivaldi · Opera and Safari: coming soon

  • DNS over HTTPS

    Protects
    The configured browser or the whole device (Apple profile, Nebulo)
    How to start
    An address in settings, or a profile to install
    Cost
    Free, no account

    In any browser, system or app that supports DNS over HTTPS.

  • The RoTunneling VPN app

    Protects
    Every app, plus an encrypted connection and a Romanian IP
    How to start
    Install the app and connect
    Cost
    RoTunneling account, with a subscription

    Protection is on by default in the app.

The easiest option for youAll options

Below are all the options, for every device and browser.

Other options

RecommendedExtensionOne click

Extension for Chrome

Stops phishing, scam and malware pages before they load and shows you a clear warning. It also stops tracking servers and intrusive ad networks. Works in Brave and Vivaldi too.

Install from the Chrome Web Store

Free, no account. The check runs in your browser.

RecommendedDNS over HTTPSNo install

DNS over HTTPS in Chrome

Add the RoTunneling Protect DoH address in Chrome's settings. The browser's DNS lookups are encrypted and checked against our lists.

Steps in Google Chrome
https://dns.rotunneling.net/dns-query/public

Settings > Privacy and security > Security > Use secure DNS > Select DNS provider: Add custom DNS service provider, then enter the address above.

RecommendedVPN appEvery app

The RoTunneling VPN app

Protects every app on your device, encrypts the connection between your device and our servers and gives you a Romanian IP.

Nothing to set up: while connected, the RoTunneling VPN apps use the same Malware and Phishing Protection by default. To turn it off, use Disable malware protection in the app settings.

RecommendedExtensionOne click

Extension for Microsoft Edge

Stops phishing, scam and malware pages before they load and shows you a clear warning. It also stops tracking servers and intrusive ad networks.

Install from Edge Add-ons

Free, no account. The check runs in your browser.

RecommendedDNS over HTTPSNo install

DNS over HTTPS in Edge

Add the RoTunneling Protect DoH address in Edge's settings. The browser's DNS lookups are encrypted and checked against our lists.

Steps in Microsoft Edge
https://dns.rotunneling.net/dns-query/public

Settings > Privacy, search, and services > Security > Use secure DNS > Choose a service provider, then enter the address above.

RecommendedExtensionOne click

Extension for Firefox

Stops phishing, scam and malware pages before they load and shows you a clear warning. It also stops tracking servers and intrusive ad networks.

Install from Firefox Add-ons

Free, no account. The check runs in your browser.

RecommendedDNS over HTTPSNo install

DNS over HTTPS in Firefox

Add the RoTunneling Protect DoH address in Firefox's settings. The browser's DNS lookups are encrypted and checked against our lists.

Steps in Firefox
https://dns.rotunneling.net/dns-query/public

Settings > Privacy & Security > DNS over HTTPS > Increased Protection or Max Protection > Choose provider: Custom, then enter the address above.

RecommendedDNS over HTTPSNo install

DNS over HTTPS in Brave

Add the RoTunneling Protect DoH address in Brave's settings. The browser's DNS lookups are encrypted and checked against our lists.

Steps in Brave
https://dns.rotunneling.net/dns-query/public

Settings > Privacy and security > Security > Use secure DNS > Custom, then enter the address above.

RecommendedDNS over HTTPSNo install

DNS over HTTPS in Opera

Add the RoTunneling Protect DoH address in Opera's settings. The browser's DNS lookups are encrypted and checked against our lists.

Steps in Opera
https://dns.rotunneling.net/dns-query/public

Open Settings (Alt+P) > System, turn on Use DNS-over-HTTPS instead of the system's DNS settings, choose Enter Custom DNS server address and paste the address above.

RecommendedExtension

Extension for Opera

The RoTunneling Protect extension is coming to Opera soon. Until then, use DNS over HTTPS in Opera's settings.

Coming soon

RecommendedDNS over HTTPSWhole device

DNS profile for Mac

A configuration profile turns on RoTunneling Protect through DoH for your whole Mac: in Safari, in your other browsers and in your apps.

Download the profile
How to install it

Download and install the configuration profile: dns.rotunneling.net-DOH.mobileconfig. On iPhone and iPad, install it from Settings > General > VPN & Device Management; on a Mac, from System Settings > Privacy & Security > Profiles. The whole device then uses RoTunneling Protect through DoH.

RecommendedDNS over HTTPSWhole device

DNS profile for iPhone and iPad

A configuration profile turns on RoTunneling Protect through DoH for your whole iPhone or iPad: in Safari, in your other browsers and in your apps.

Download the profile
How to install it

Download and install the configuration profile: dns.rotunneling.net-DOH.mobileconfig. On iPhone and iPad, install it from Settings > General > VPN & Device Management; on a Mac, from System Settings > Privacy & Security > Profiles. The whole device then uses RoTunneling Protect through DoH.

RecommendedSafari app

App for Safari

RoTunneling Protect for Safari on Mac, iPhone and iPad is coming to the App Store soon. Until then, the DNS profile protects the whole device.

Coming soon

RecommendedDNS over HTTPSWhole phone

DNS over HTTPS on Android

https://dns.rotunneling.net/dns-query/public

Install an app that supports DNS over HTTPS, for example Nebulo, and add a server with the address above.

What it does

The addresses you open are checked against our threat lists. Pages known to be dangerous are stopped, the rest open as usual.

  1. Wherever the link isIn your browser, an email or a message: you open it as usual.
  2. Before the page loadsThe address is checked against our threat lists.
  3. A warning instead of the pageA page known to be dangerous is stopped and the extension shows you a warning. Safe pages open as usual.

You open a link

RoTunneling Protect checks the address

shop.example
Opens No known threat
secure-login.example
Blocked
Dangerous page stoppedKnown phishing address

Malware and Phishing Protection

What kinds of sites and servers we stop, and where our lists come from.

What we block

  • Phishing: fake pages that imitate banks, couriers, online shops, classifieds, payment services and email or social media accounts.
  • Scams and fake shops: fraudulent investment sites, fake offers and shops that take your money and deliver nothing.
  • Malware: servers that distribute viruses, trojans and ransomware.
  • Command-and-control servers: (DoH and VPN app) an infected device is cut off, so it gets no commands and cannot send your data out.
  • Malicious IP addresses: (DoH and VPN app) DNS answers that point to known malware or command-and-control servers are blocked too, even when the domain name is new.
  • Malvertising: ad networks that spread malware on otherwise legitimate sites, plus aggressive pop-ups and redirects.
  • Tracking and some intrusive ads: tracking and profiling servers and some intrusive ad networks.
  • Hidden cryptomining: scripts that use your processor without your consent.
  • Stalkerware: (DoH and VPN app) spy apps installed in secret that send out your messages, location and calls.
  • Fake betting and casino sites: (DoH and VPN app) unlicensed gambling sites used for scams.

The browser extension covers phishing, scams, malware, malvertising, tracking servers, intrusive ad networks and hidden cryptomining. Command-and-control servers, malicious IP addresses, stalkerware and fake betting sites are stopped by RoTunneling Protect through DoH and the VPN app.

Where our lists come from

  • National security teams (CERTs) in several countries, which publish the phishing and fraud domains found in real incidents.
  • Vatra Sentinel, a Romanian AI-based system that analyses SSL certificates issued worldwide in real time and flags phishing and fraud sites the moment they go online.
  • Specialised threat intelligence lists, maintained by security organisations and researchers.
  • Lists of ad, tracking and malvertising networks.

Our lists are chosen so apps and sites keep working.

For those who want the details

The service address, how DNS filtering differs from the extension, and what each option covers.

The RoTunneling Protect DoH address
https://dns.rotunneling.net/dns-query/public

Use it in any browser, system or app that supports DNS over HTTPS. The service works over DNS over HTTPS only.

DNS filtering or the extension

Classic DNS travels unencrypted, so your provider or anyone on your network can see and change it. DNS over HTTPS encrypts every lookup, and our own system checks each one against our threat lists: if the destination is dangerous, the connection never starts.

Set in a browser, DNS over HTTPS protects that browser; with the Apple profile or Nebulo, it protects the whole device.

The extension works in the browser you install it in. It recognises dangerous pages right in the browser, shows you a clear warning and stops tracking servers and intrusive ad networks.

What each option covers
FeatureExtensionDNS over HTTPSVPN app
Where it protectsIn the browser you install it inIn the configured browser or on the whole device (Apple profile, Nebulo)In every app on the device
On a dangerous pageStops it and shows a warningThe connection never startsThe connection never starts
Phishing, scams, malware, malvertisingYesYesYes
Tracking and intrusive adsTracking and intrusive ad networksTracking and some intrusive adsTracking and some intrusive ads
Command and control, malicious IPs, stalkerware, fake bettingNoYesYes
Encrypted connection and Romanian IPNoOnly DNS lookups are encryptedYes
Account and priceFree, no accountFree, no accountRoTunneling account, with a subscription
Privacy

Extension: the check runs in your browser. Your browser hashes the site name and compares it with a list stored on your device, so our server never receives the address you open.

DNS over HTTPS: your DNS lookups are not stored. The service does not need them, and requests reach our server through an intermediate network, so it never sees your real IP.

Full protection with RoTunneling VPN

The Protect extension looks after your browser. RoTunneling VPN looks after the whole phone or computer, on any network.

The RoTunneling Protect extension and RoTunneling VPN compared
What you getRoTunneling ProtectFree browser extensionRoTunneling VPNWhole-device protection
Ads and trackers in this browserIncludedIncluded
Blocks known phishing, scam and malware sitesIncludedIncluded
Every app and every browserNot includedIncluded
Encrypted traffic on any Wi-FiNot includedIncluded
Romanian IP addressNot includedIncluded

Through the DoH address, Protect also covers most apps, without encrypting your traffic.

Frequently asked questions

Another question? Write to [email protected].

Do I need the VPN to use it?

No. It works on its own in any browser or device that supports DNS over HTTPS.

Does it slow down my browsing?

No. The check happens during the DNS lookup itself, so pages load as usual.

Are my DNS lookups stored?

No. The service does not need them, and requests reach our server through an intermediate network, so it never sees your real IP.

A legitimate site is blocked, or a malicious one is not. What do I do?

Write to [email protected] or use the feedback form, with the link, and we will correct it.