DNS over TLS
Encrypts the query end-to-end over port 853, protecting lookups from passive observation on supported systems.
Public DNS resolver by Oxychain
Every query answered.
Nothing else revealed.
OxyDNS resolves fast and stays out of the way — Plain DNS for compatibility, DNS-over-TLS and DNS-over-HTTPS when you want the query encrypted in transit. No accounts, no apps, five minutes to set up.
DoT · port 853
DoH · port 443
DNS · port 53
Initiating network scan…
Your IP
··.··.··.··
Location
Locating…
Nearest PoP
···
Edge latency
·· ms
oxydns — resolve
DoH
▍
status: resolved
A
TTL 300
Illustrative demo — cycles through sample queries.
Privacy-conscious by design
DoT and DoH support
Clean, predictable resolution
Five-minute setup
No accounts required
No-log architecture
Encrypted transport (DoT / DoH)
DNSSEC validated
5-minute setup
Always available
Features
Built for speed, privacy, and reliability
Everything a modern resolver should do: encrypted transport where you want it, plain compatibility where you need it, and safeguards that keep answers clean.
DNS over HTTPS
Resolves over standard HTTPS, so encrypted lookups blend in with ordinary web traffic in supported browsers and apps.
Plain DNS support
Standard DNS on port 53 for maximum compatibility with routers, IoT devices, and legacy network stacks.
Privacy-conscious design
Built to minimize unnecessary exposure, with public endpoints that keep setup simple for everyday users.
Secure-by-default backend
DNSSEC validation and response filtering are on out of the box — nothing extra to configure.
Stable performance
Reliable routing and continuous operational monitoring for consistent day-to-day resolution.
Setup
Ready in under five minutes
Pick the option that matches your device or client — copy the endpoint and you're resolving through OxyDNS.
Android Private DNS
mobile
dns.oxychain.xyzUse as the Private DNS provider hostname in Android network settings.
DNS-over-TLS
port 853
dns.oxychain.xyz:853Use in systems and apps that support DoT with an explicit hostname and port.
DNS-over-HTTPS
port 443
https://dns.oxychain.xyz/dns-queryUse in browsers, DoH-aware clients, and apps that accept a query URL.
Plain DNS
port 53
87.120.126.55
87.120.126.46Use as IPv4 DNS server addresses in standard router or OS network settings.
How it works
Your queries stay private, from origin to answer
OxyDNS processes every resolution using encrypted channels, minimal metadata, and zero logging. Your browsing activity never becomes a product.
01
Query encrypted at source
Your device sends a DNS query wrapped in TLS or HTTPS. No plaintext on the wire. No passive observer can read it.
02
Resolved fast and clean
OxyDNS processes the query without storing identifying information. Clean resolution, predictable answers.
03
DNSSEC validated
Cryptographic signatures are checked before the answer is returned — spoofed or tampered records are rejected.
04
Answer delivered, nothing retained
The resolved IP is returned to your device. No query log, no user profile, no data sold to advertisers.
Security & reliability
Built with secure defaults
OxyDNS is a resolver, not a VPN replacement — it improves DNS behavior while keeping configuration clear and predictable.
DNSSEC-validating backend
Responses are checked for DNSSEC validity wherever the record supports it.
Private-answer protection
Safeguards reduce the risk of unsafe private or internal DNS answers leaking out.
Secure transport
Strong encrypted DNS options through DoT and DoH, side by side with plain compatibility.
Reliable performance
Built for stable resolution with continuous operational checks behind the scenes.
FAQ
Frequently asked questions
Quick answers on how OxyDNS works and what it can do for you.
OxyDNS is a public DNS resolver from Oxychain, reachable over Plain DNS, DNS-over-TLS, and DNS-over-HTTPS.
Yes — use DNS-over-TLS at dns.oxychain.xyz:853, or DNS-over-HTTPS at https://dns.oxychain.xyz/dns-query.
Copy the endpoint that matches your device. Android can use the Private DNS hostname; other systems can use DoT, DoH, or Plain DNS.
No. OxyDNS improves DNS resolution behavior — it doesn't tunnel all traffic or replace a VPN or proxy.
Live Security Audit
Is your current connection really private?
We analyze your network in real time — checking for DNS leaks, WebRTC exposure, timezone anomalies, and proxy signatures. All processing happens locally; no data leaves your device.
Analyzing WebRTC channels · Cross-referencing ASN records · Resolving IP path…
Privacy. Speed.
Reliability. All in one DNS.
Point your devices at OxyDNS for a faster, cleaner, more reliable resolution experience — every day, on everything you use.