## Title : TheGreatWall
## Prevent program and malware to bypass DNS filter by using popular DoH services
## To block DNS over TLS (DoT), block port 853
## This list has been created for security purpose ONLY
## To be more efficient, you should also consider blocking DoH providers IP adresses
## Last update : 15 June 2020
## Domain count : 132
===================================================================

# Aaflalo
dns.aaflalo.me
dns-nyc.aaflalo.me

# AdGuard
dns.adguard.com
dns-family.adguard.com

# Alekberg
dns.alekberg.net
dns2.alekberg.net
dnsse.alekberg.net

# AliDNS
dns.alidns.com

# Andrews & Arnold
dns.aa.net.uk

# Association 42l
doh.42l.fr

# AT&T
dohtrial.att.net

# BlahDNS
doh-fi.blahdns.com
doh-jp.blahdns.com
doh-de.blahdns.com
doh-sg.blahdns.com

# Brahma World
dns.brahma.world

# Canadian Shield
private.canadianshield.cira.ca
protected.canadianshield.cira.ca
family.canadianshield.cira.ca

# Captnemo
doh.captnemo.in

# Cisco
doh.opendns.com
doh.familyshield.opendns.com

# Clean Browsing
family-filter-dns.cleanbrowsing.org
adult-filter-dns.cleanbrowsing.org
security-filter-dns.cleanbrowsing.org
doh.cleanbrowsing.org

# Cloudflare
one.one.one.one
mozilla.cloudflare-dns.com
1dot1dot1dot1.cloudflare-dns.com
cloudflare-dns.com
dns64.cloudflare-dns.com
security.cloudflare-dns.com
family.cloudflare-dns.com

# Comcast
doh.xfinity.com

# Comodo
ns1.recursive.dnsbycomodo.com
ns2.recursive.dnsbycomodo.com

# Commons-host
commons.host

# ContainerPI
dns.containerpi.com

# Cox
dohdot.coxlab.net

# Crypto.sx
doh.crypto.sx
doh-ipv6.crypto.sx

# Digitale Gesellschaft
dns.digitale-gesellschaft.ch

# Doh.li
doh.li

# DNScrypt (DoH)
dns1.dnscrypt.ca
dns2.dnscrypt.ca

# DNSforge
dnsforge.de

# DNS home
dns.dnshome.de

# DNS lify
doh.dnslify.com
a.ns.dnslify.com
b.ns.dnslify.com
a.safe.ns.dnslify.com
b.safe.ns.dnslify.com
a.family.ns.dnslify.com
b.family.ns.dnslify.com

# DNS Seby
doh.seby.io
doh-2.seby.io

# DNS.SB
doh.dns.sb

# Dyn
resolver1.dyndnsinternetguide.com
resolver2.dyndnsinternetguide.com

# FFmuc
doh.ffmuc.net

# Foundation for Applied Privacy
doh.applied-privacy.net

# GeekDNS
dns.233py.com
i.233py.com
wdns.233py.com
ndns.233py.com
sdns.233py.com

# Google
dns.google.com
dns.google
google-public-dns-a.google.com
google-public-dns-b.google.com
dns64.dns.google

# Hostux
dns.hostux.net

# Ibuki
ibuki.cgnat.net

# Ibksturm
ibksturm.synology.me

# Jcdns
jcdns.fun

# Lelux
resolver-eu.lelux.fi

# LibreDNS
doh.libredns.gr

# Microsoft
dns.msftncsi.com

# Mrkaran
dns.mrkaran.dev

# NekomimiRouter
dns.dns-over-https.com

# NextDNS
dns.nextdns.io

# NixNet
uncensored.any.dns.nixnet.xyz
adblock.any.dns.nixnet.xyz
uncensored.lv1.dns.nixnet.xyz
adblock.lv1.dns.nixnet.xyz
uncensored.ny1.dns.nixnet.xyz
adblock.ny1.dns.nixnet.xyz
uncensored.lux1.dns.nixnet.xyz
adblock.lux1.dns.nixnet.xyz

# OpenDNS
resolver1.opendns.com
resolver2.opendns.com
resolver1-fs.opendns.com
resolver2-fs.opendns.com
resolver1.ipv6-sandbox.opendns.com
resolver2.ipv6-sandbox.opendns.com

# OSZX (PumpleX)
dns.oszx.co
dns.pumplex.com

# Pi-DNS
doh.centraleu.pi-dns.com
doh.northeu.pi-dns.com
doh.westus.pi-dns.com
doh.eastus.pi-dns.com

# PowerDNS
doh.powerdns.org

# Qua9
dns.quad9.net
dns9.quad9.net
dns10.quad9.net
dns11.quad9.net
rpz-public-resolver1.rrdns.pch.net
dns-nosec.quad9.net

# Quad101
dns.twnic.tw

# Rubyfish
v6.rubyfish.cn
dns.rubyfish.cn
ea-dns.rubyfish.cn
uw-dns.rubyfish.cn

# Secure DNS
doh.securedns.eu
ads-doh.securedns.eu

# Snopyta
fi.doh.dns.snopyta.org

# Switch
dns.switch.ch

# Tiarap
doh.tiar.app
doh.tiarap.org
jp.tiar.app
jp.tiarap.org

# t53
dns.t53.de

# Xfinity (Comcast)
doh.xfinity.com

# block firefox application DoH
firefox.dns.nextdns.io
mozilla.cloudflare-dns.com

# Apple DoH
doh.dns.apple.com.v.aaplimg.com
doh.dns.apple.com

# *.applied-privacy.net
doh.applied-privacy.net
dot1.applied-privacy.net

# following 233py.com need to be checked if still in use
edns.233py.com
ndns.233py.com
sdns.233py.com
wdns.233py.com

# cloudflare-dns
dns.cloudflare.com
family.cloudflare-dns.com
security.cloudflare-dns.com
cloudflare-dns.com
1dot1dot1dot1.cloudflare-dns.com
one.one.one.one
dns64.cloudflare-dns.com
mozilla.cloudflare-dns.com
cloudflare-gateway.com

# alias for dns.quad9.net
rpz-public-resolver1.rrdns.pch.net

# *.seby.io
doh.seby.io
doh-2.seby.io
2.dnscrypt-cert.dns.seby.io
dot.seby.io
dnscrypt-cert.dns.seby.io
dns.seby.io

# *.censurfridns.dk
anycast.uncensoreddns.org
unicast.uncensoreddns.org
deic-lgb.anycast.uncensoreddns.org
deic-ore.anycast.uncensoreddns.org
kracon.anycast.uncensoreddns.org
rgnet-iad.anycast.uncensoreddns.org

# NextDNS
dns.nextdns.io

# *.dismail.de
fdns1.dismail.de
fdns2.dismail.de

# OpenDNS
0.0.0.0 doh.opendns.com
0.0.0.0 doh.familyshield.opendns.com
0.0.0.0 doh.sandbox.opendns.com
0.0.0.0 resolver1.opendns.com
0.0.0.0 resolver2.opendns.com
0.0.0.0 resolver1-fs.opendns.com
0.0.0.0 resolver2-fs.opendns.com
0.0.0.0 dns.oszx.co

# *.blahdns.com
doh-ch.blahdns.com
dot-ch.blahdns.com
doh-jp.blahdns.com
dot-jp.blahdns.com
doh-sg.blahdns.com
dot-sg.blahdns.com
doh-de.blahdns.com
dot-de.blahdns.com
doh-fi.blahdns.com
dot-fi.blahdns.com

# quad9
dns.quad9.net
dns9.quad9.net
dns10.quad9.net
dns11.quad9.net
dns12.quad9.net
dns13.quad9.net
dns-nosec.quad9.net

# Others
dns.dnsoverhttps.net
doh.dnswarden.com
doh.appliedprivacy.net
public.dns.iij.jp
jp.gridns.xyz
dns.flatuslifir.is
odvr.nic.cz
rumpelsepp.org
ordns.he.net
rdns.faelix.net
adfree.usableprivacy.net
pdns.faelix.net
rdns.faelix.net
dns.decloudus.com
doh.abmb.win
doh2.abmb.win
dns.dnshome.de
adfree.usableprivacy.net
jarjar.meganerd.nl
dns.dns-over-https.com
dns.mrkaran.dev
dnsbycomodo.com
dns.switch.ch
dns.alidns.com
ordns.he.net
canadianshield.cira.ca
dns.nixnet.xyz
rumpelsepp.org
dohtrial.att.net
dnsforge.de
resolver-eu.lelux.fi
dns.flatuslifir.is
doh.defaultroutes.de
doh.libredns.gr
doh.blockerdns.com
jcdns.fun
dns.hostux.net
dohdot.coxlab.net
dnswarden.com
doh.dnslify.com
dns-gcp.aaflalo.me
dns-nyc.aaflalo.me
dns.aaflalo.me
doh.abmb.win
doh2.abmb.win
dns.adguard.com
dns-family.adguard.com
dns-unfiltered.adguard.com
dns.adguard-dns.com
family.adguard-dns.com
unfiltered.adguard-dns.com
doh.nl.ahadns.net
doh.in.ahadns.net
doh.la.ahadns.net
doh.ny.ahadns.net
doh.pl.ahadns.net
doh.it.ahadns.net
doh.es.ahadns.net
doh.no.ahadns.net
doh.chi.ahadns.net
dot.nl.ahadns.net
dot.in.ahadns.net
dot.la.ahadns.net
dot.ny.ahadns.net
dot.pl.ahadns.net
dot.it.ahadns.net
dot.es.ahadns.net
dot.no.ahadns.net
dot.chi.ahadns.net
dnsnl.alekberg.net
dnsse.alekberg.net
dns.alidns.com
doh.appliedprivacy.net
doh.applied-privacy.net
dot1.applied-privacy.net
doh.armadillodns.net
dohtrial.att.net
doh1.blahdns.com
doh1.b-cdn.net
doh2.blahdns.com
doh2.b-cdn.net
dot-ch.blahdns.com
doh-ch.blahdns.com
dot-fi.blahdns.com
doh-fi.blahdns.com
dot-de.blahdns.com
doh-de.blahdns.com
dot-jp.blahdns.com
doh-jp.blahdns.com
dot-sg.blahdns.com
doh-sg.blahdns.com
doh.bortzmeyer.fr
dns.brahma.world
free.bravedns.com
bravedns.com
doh.captnemo.in
ibuki.cgnat.net
canadianshield.cira.ca
family.canadianshield.cira.ca
private.canadianshield.cira.ca
protected.canadianshield.cira.ca
doh.cleanbrowsing.org
security-filter-dns.cleanbrowsing.org
adult-filter-dns.cleanbrowsing.org
family-filter-dns.cleanbrowsing.org
dns.cmrg.net
commons.host
dns.containerpi.com
dohdot.coxlab.net
doh.crypto.sx
jit.ddns.net
dns.decloudus.com
doh.defaultroutes.de
dns.developer.li
dns2.developer.li
dns.digitale-gesellschaft.ch
dns1.digitale-gesellschaft.ch
dns2.digitale-gesellschaft.ch
doh.disconnect.app
ns1.recursive.dnsbycomodo.com
ns2.recursive.dnsbycomodo.com
dnsforge.de
dns.google
dns64.dns.google
dns.dnshome.de
dns1.dnscrypt.ca
dns2.dnscrypt.ca
doh.dns.sb
public-dns-a.dns.sb
public-dns-b.dns.sb
doh.dnslify.com
a.ns.dnslify.com
b.ns.dnslify.com
a.safe.ns.dnslify.com
b.safe.ns.dnslify.com
a.family.ns.dnslify.com
b.family.ns.dnslify.com
dns.dnsoverhttps.net
doh.dnswarden.com
doh.li
doh.ffmuc.net
dot.ffmuc.net
rdns.faelix.net
pdns.faelix.net
dns.flatuslifir.is
query.hdns.io
ordns.he.net
dns.hostux.net
opennic.i2pd.xyz
public.dns.iij.jp
jcdns.fun
us1.dns.lavate.ch
eu1.dns.lavate.ch
resolver-eu.lelux.fi
doh.libredns.org
dot.libredns.gr.com
dot.libredns.gr
doh.libredns.gr
adblock.mydns.network
dns.neutopia.org
dns.aa.net.uk
dns.nextdns.io
dns1.nextdns.io
dns2.nextdns.io
odvr.nic.cz
lv1.nixnet.xyz
ny1.nixnet.xyz
lux1.nixnet.xyz
dns.njal.la
a.passcloud.xyz
i.passcloud.xyz
doh.post-factum.tk
doh.powerdns.org
rpz-public-resolver1.rrdns.pch.net
dns.pumplex.com
dns.rubyfish.cn
ea-dns.rubyfish.cn
uw-dns.rubyfish.cn
rumpelsepp.org
dns1.ryan-palmer.com
dnsovertls.sinodun.com
dnsovertls1.sinodun.com
dnsovertls2.sinodun.com
dnsovertls3.sinodun.com
fi.doh.dns.snopyta.org
fi.dot.dns.snopyta.org
dns.switch.ch
ibksturm.synology.me
dns.t53.de
dns.therifleman.name
doh.tiar.app
dot.tiar.app
doh.tiarap.org
jp.tiar.app
jp.tiarap.org
dns.twnic.tw
dns.wugui.zone
dns-asia.wugui.zone
adfree.usableprivacy.net
doh.xfinity.com
doh.gslb2.xfinity.com
fdns1.dismail.de
fdns2.dismail.de
anycast.censurfridns.dk
deic-lgb.anycast.censurfridns.dk
deic-ore.anycast.censurfridns.dk
kracon.anycast.censurfridns.dk
rgnet-iad.anycast.censurfridns.dk
unicast.censurfridns.dk
anycast.uncensoreddns.org
deic-lgb.anycast.uncensoreddns.org
deic-ore.anycast.uncensoreddns.org
kracon.anycast.uncensoreddns.org
rgnet-iad.anycast.uncensoreddns.org
unicast.uncensoreddns.org
dns.comss.one
dns.east.comss.one
dns-doh.dnsforfamily.com
dns-dot.dnsforfamily.com
asia.dnscepat.id
eropa.dnscepat.id
doh.360.cn
dot.360.cn
doh.pub
dns.pub
dot.pub
kaitain.restena.lu
getdnsapi.net
dns-tls.bitwiseshift.net
ns1.dnsprivacy.at
ns2.dnsprivacy.at
privacydns.go6lab.si
dnsotls.lab.nic.cl
tls-dns-u.odvr.dns-oarc.net
doh.centraleu.pi-dns.com
dot.centraleu.pi-dns.com
doh.northeu.pi-dns.com
dot.northeu.pi-dns.com
doh.westus.pi-dns.com
dot.westus.pi-dns.com
doh.eastus.pi-dns.com
dot.eastus.pi-dns.com
doh.eastau.pi-dns.com
dot.eastau.pi-dns.com
doh.eastas.pi-dns.com
dot.eastas.pi-dns.com
basic.bravedns.com
freedns.controld.com
p0.freedns.controld.com
p1.freedns.controld.com
p2.freedns.controld.com
p3.freedns.controld.com
family.freedns.controld.com
uncensored.freedns.controld.com
doh.mullvad.net
adblock.doh.mullvad.net
chrome.cloudflare-dns.com
dot.xfinity.com
doh.xfinity.com
dot.cox.net
doh.cox.net
dns.sb
8888.google
chromium.dns.nextdns.io
doh.quickline.ch
doh-02.spectrum.com
doh-01.spectrum.com
mask.icloud.com
mask-h2.icloud.com
dandelionsprout.asuscomm.com
basic.rethinkdns.com
max.rethinkdns.com
anycast.dns.nextdns.io
doh.42l.fr
i.233py.com
i.233py.com.a.bdydns.com
opencdn.jomodns.com
dns.233py.com
dns.233py.com.cdn.cloudflare.net
dns.oszx.co
dns.pumplex.com
dns.brahma.world
dns2.developer.li
dns.developer.li
doh.dns.sb
doh.ffmuc.net
public.dns.iij.jp
doh.libredns.org
doh.netweaver.uk
dns.twnic.tw
doh.xfinity.com
doh.gslb2.xfinity.com
dnscrypt.ca
blitz.ahadns.com
dns.t53.de
snopyta.org
alekberg.net
blitz.ahadns.com
www.jcdns.fun
dns.nixnet.xyz