Endpoints Features How it Works Setup Privacy Main Site
Encrypted DNS Resolver

Browse Without The Noise.

PurrfectDNS blocks ads, trackers, phishing & malware at DNS level before a connection is even made. Encrypted, fast, zero logs.

Copy Endpoints
DoHHTTPS
DoTTLS
DoQQUIC
FreeAlways
DNS Speed Test
--
ms
Your Network
Detecting...

Endpoints

Pick Your Protocol

All traffic is encrypted end-to-end. Choose the method that fits your device.

Browsers & Apps

DNS-over-HTTPS

Works in Chrome, Edge, Firefox, iOS, Android apps, and any client supporting DoH.

https://dns.thepurrfectproject.com/dns-query
Android Private DNS

DNS-over-TLS

For Android 9+, go to Settings → Network → Private DNS and enter the hostname below.

dns.thepurrfectproject.com
Fastest Protocol

DNS-over-QUIC

Ultra-fast with 0-RTT handshake. Supported by AdGuard apps, dnscrypt-proxy, and modern clients.

quic://dns.thepurrfectproject.com

Why PurrfectDNS

What Makes It Different

Ad & Tracker Blocking

Blocks annoying ads, hidden trackers, phishing and malware domains at the DNS level across your entire device before a connection is even made.

Fully Encrypted

Your DNS queries are fully encrypted using DoH, DoT, or DoQ. Your ISP or local network admin cannot spy on your browsing history.

No Logs Policy

Absolute privacy. We don't log, store, or sell your DNS queries. Your browsing data stays yours and yours alone.

Lightning Fast

Powered by custom-built Unbound edge nodes with AWS Global Accelerator Routing and DNSSEC validation, ensuring minimal latency and high security.

Bypass Detectors

DNS-level blocking is invisible to websites. Say goodbye to annoying "please disable your adblocker to continue" popups.

The Purrfect Project

Part of the open-source Purrfect ecosystem. No accounts, no subscriptions, no sketchy apps needed. Free forever.

How it works

DNS Filtering in 3 Steps

01

You Type a URL

Your device sends a DNS query asking "what's the IP of this domain?" before any page loads.

02

PurrfectDNS Checks

We check the domain against massive blocklists. If it's an ad, tracker, or malware — it gets blocked.

03

Clean Result

Only legitimate domains get resolved. Your device loads clean pages, faster and safer.

Get started

Configure Your Device

Choose your platform below. Setup takes less than a minute.

1

Open Settings

Go to Settings → Network & Internet → Private DNS (or search "Private DNS").

2

Select "Private DNS provider hostname"

Enter the hostname:

dns.thepurrfectproject.com
3

Save & Done!

All DNS traffic on your device is now encrypted and ad-free.

1

Download Configuration Profile

Generate a DNS profile at dns.notjakob.com.

2

Enter DoH URL

Use this URL:

https://dns.thepurrfectproject.com/dns-query
3

Install Profile

Go to Settings → General → VPN & Device Management and install it.

1

Chrome / Edge / Brave

Settings → Privacy & Security → Use Secure DNS. Select "Custom" and paste:

https://dns.thepurrfectproject.com/dns-query
2

Firefox

Settings → General → Network Settings → Enable DNS over HTTPS. Set Custom and paste the URL.

1

Windows 11

Settings → Network & Internet → Wi-Fi → DNS Server Assignment → Edit.

2

Enable DNS over HTTPS

Set encryption to "On" and enter:

https://dns.thepurrfectproject.com/dns-query
1

systemd-resolved

Edit /etc/systemd/resolved.conf:

[Resolve]
DNS=dns.thepurrfectproject.com
DNSOverTLS=yes

Then: sudo systemctl restart systemd-resolved

2

dnscrypt-proxy

Add to your config:

https://dns.thepurrfectproject.com/dns-query
Zero-Logs Privacy Policy

1. Absolute Zero-Logs Commitment

PurrfectDNS operates on a strict zero-logs policy. We do not log, collect, or store any personally identifiable information (PII), IP addresses, or DNS query data. Your browsing history is completely invisible to us.

2. System Architecture & Independent Resolvers

We do not forward your queries to third-party corporate resolvers (like Google or Quad9). Instead, PurrfectDNS operates its own custom-built Unbound edge nodes that recursively resolve DNS queries directly with authoritative root servers. We spoof no identities, but we ensure yours remains strictly hidden.

3. Global Edge Network

We utilize AWS Global Accelerator Edge Routing to ingest traffic from the POP (Point of Presence) closest to you, transporting it over the AWS premium backbone to our secure nodes. This guarantees minimal latency without compromising decentralization.

4. Transparency & Blocklists

Our threat intelligence and ad-blocking layers are fully open-source, utilizing trusted community lists like OISD, StevenBlack, and AdGuard DNS filters. Because we don't log, we cannot and will not monetize your data.