DNS over HTTPS
DNS queries sent through an encrypted HTTPS connection.
https://spacedns.org/dns-query
Secure DNS · Made in Poland · For Europe
Privacy in every query.
Free encrypted DNS that blocks ads and tracking without keeping logs. Simple to use, privacy-focused, and built for Europe.
FreeNo loggingAd & tracker blockingDoH + DoT
Encrypted DNS
Choose your protocol.
SpaceDNS supports modern encrypted DNS standards. Copy an endpoint below and add it to your compatible browser, operating system, router, or DNS client.
DNS over TLS
DNS traffic protected with Transport Layer Security.
tls://spacedns.org
Why SpaceDNS
Less noise.
Less noise.
More privacy.
A minimal public DNS service focused on the essentials: encrypted queries, privacy, filtering, and easy access.
◎
No logging
Your DNS service should not become another source of browsing history.
⊘
Blocks ads & tracking
Reduce requests to known advertising and tracking domains at the DNS layer.
⌁
Encrypted protocols
Use DNS over HTTPS or DNS over TLS with supported clients.
✦
Made in Poland
A European DNS service created in Poland and focused on users in Europe.
Quick setup
Choose your device.
Select a platform to see a short system-wide SpaceDNS configuration guide. Android uses Private DNS over TLS, while Apple devices can use the ready-to-install encrypted DNS profile.
View DNS endpointsWindows 11
DNS over HTTPS1
Register the SpaceDNS DoH templateOpen Windows Terminal or Command Prompt as Administrator and run:
netsh dnsclient add encryption server=54.37.137.4 dohtemplate=https://spacedns.org/dns-query autoupgrade=yes udpfallback=no2
Set SpaceDNS as the DNS serverOpen Settings → Network & internet → Wi-Fi or Ethernet → DNS server assignment → Edit. Choose Manual, enable IPv4 and set Preferred DNS to 54.37.137.4. Select encrypted DNS / DNS over HTTPS when the option appears.
3
Verify the encrypted resolverRun the command below and confirm that 54.37.137.4 is mapped to the SpaceDNS DoH template.
netsh dnsclient show encryptionLinux
DNS over TLS1
Check that systemd-resolved is activeRun resolvectl status. This guide is intended for Linux distributions that use systemd-resolved.
2
Enable SpaceDNS over TLSCreate a systemd-resolved drop-in with the SpaceDNS IP and TLS hostname:
sudo mkdir -p /etc/systemd/resolved.conf.d
printf '[Resolve]\nDNS=54.37.137.4#spacedns.org\nDNSOverTLS=yes\n' | sudo tee /etc/systemd/resolved.conf.d/spacedns.conf3
Restart and verifyRestart the resolver and check that DNS over TLS is enabled.
sudo systemctl restart systemd-resolved
resolvectl statusNote: Linux DNS configuration differs between distributions. If your system does not use systemd-resolved, use a DNS client that supports DoH or DoT and the SpaceDNS endpoints above.
Android
Private DNS / DoT1
Open Private DNS settingsOpen Settings → Network & internet → Private DNS. If the option is not visible, search Settings for “Private DNS”.
2
Choose a private DNS providerSelect Private DNS provider hostname and enter the SpaceDNS hostname:
spacedns.org3
Save the configurationTap Save. Android will use SpaceDNS system-wide over DNS over TLS on networks where Private DNS is available.
Note: Android Private DNS expects a hostname, not an IP address or an HTTPS URL. Use spacedns.org.
iPhone / iPad
DNS over HTTPS1
Download the SpaceDNS profileThe configuration profile contains the SpaceDNS encrypted DNS-over-HTTPS endpoint.
2
Install the downloaded profileOpen Settings and tap Profile Downloaded, then tap Install. You can later view or remove it in Settings → General → VPN & Device Management.
3
SpaceDNS is readyAfter installation, iOS uses the profile for encrypted DNS. The profile points to https://spacedns.org/dns-query.
Profile: the file configures only the encrypted DNS resolver and can be removed from the device settings at any time.
Mac
DNS over HTTPS1
Download and open the SpaceDNS profileUse the same encrypted DNS profile as on iPhone and iPad.
2
Install it in Device ManagementOpen System Settings → General → Device Management. In the Downloaded section, open SpaceDNS and choose Install.
3
Confirm the profileSpaceDNS should now appear in Device Management as an installed profile and provide system-wide encrypted DNS.
Profile: SpaceDNS uses the DNS over HTTPS endpoint https://spacedns.org/dns-query. You can remove the profile later from Device Management.
Blocklists
What SpaceDNS filters.
SpaceDNS currently uses two size-optimized blocklists from the official HaGeZi DNS Blocklists project: Multi PRO mini and Threat Intelligence Feeds mini.
Active
HaGeZi Multi PRO mini
hagezi-pro-mini
A compact, size-optimized variant of Multi PRO. It helps filter advertising, trackers, metrics, telemetry and other unwanted domains.
Active
HaGeZi TIF mini
hagezi-tif-mini
A compact version of HaGeZi Threat Intelligence Feeds focused on malicious infrastructure, including malware, phishing, scams, spam, cryptojacking and command-and-control domains.
Source: HaGeZi / dns-blocklists. SpaceDNS uses the compact variants listed above.
GitHub ↗