Skip to content

Forjed DNS

Privacy-first DNS, zero exceptions

Ads, trackers and phishing domains blocked before they load: encrypted and logless.

200,000+

Domains blocked

0

Queries logged

24h

Phishing list refresh

853

DNS-over-TLS port

What it does

Everything Forjed DNS blocks, in one place

One resolver, doing the one job DNS should always have done: getting you to the sites you want, and nowhere else.

Ad & tracker blocking

Ads and trackers are refused at the DNS level, before a connection is even opened, from big names like Amazon and Cloudflare to lesser-known ad networks like Zedo.

Phishing protection

A phishing domain list refreshed every 24 hours blocks known scam and credential-harvesting sites automatically.

Zero logs, always

No query logs, no IP logs, nothing tied to you. If it was never written down, it can never be handed over, leaked, or sold.

DNS-over-TLS

Your DNS queries are encrypted in transit, so your ISP and anyone else on the network can't see which domains you're resolving.

HTTPS-over-DNS (soon)

DoH support is on the way, for browsers and platforms that prefer it over DoT.

Works everywhere

Any device or router that supports custom DNS can use Forjed DNS: desktop, mobile, or your whole home network at once.

Under the hood

The lists we combine to get to 200,000+ domains

No single blocklist catches everything, so Forjed DNS merges several well-regarded, actively maintained ones, deduplicated into a single resolver.

Forjed's own blocklist

Hand-maintained entries for trackers and ad networks we've flagged ourselves.

StevenBlack/hosts

A widely used, actively maintained community aggregate of ad- and malware-serving domains.

Phishing Army

A blocklist dedicated specifically to active phishing domains, updated continuously.

HaGeZi native trackers

Blocks telemetry baked directly into device and OS software (Apple, Windows).

NextDNS native tracking domains

Covers first-party tracking endpoints built into apps and devices.

Connection details

Point your device at Forjed DNS

Hostname

dns.forjed.xyz

Port (DoT)

853

IP address

151.242.3.8

Setup

Get connected

Android

Settings → Network & internet → Private DNS → Private DNS provider hostname → enter dns.forjed.xyz.

iOS / macOS

Install a DNS-over-TLS configuration profile pointed at dns.forjed.xyz (Settings → General → VPN & Device Management once installed), or configure it in your router for your whole network.

Windows

Windows doesn't natively support DNS-over-TLS. Use a client like YogaDNS for encrypted queries, or point plain DNS at 151.242.3.8 (unencrypted).

Linux / router

Point systemd-resolved, dnsmasq, or your router's DNS-over-TLS setting at dns.forjed.xyz on port 853.

FAQ

Common questions

Will this slow down my browsing?

No. Blocking happens before a connection to the tracker/ad domain is even made, which if anything makes pages load faster since fewer requests fire.

Do you really keep no logs?

None. No query logs, no IP address logs, nothing that could reconstruct your browsing history. It's the same zero-log standard as the rest of Forjed.

Like what you're reading?

Donations keep Forjed DNS running, logless and green.