<blockquote><p>Written by <a target="_blank" rel="noopener noreferrer nofollow" href="https://www.linkedin.com/in/anshpadam">Ansh Padam</a>  - COO &amp; Managing Director  </p></blockquote><h2>Privacy shouldn't be a premium feature. It should be the default.</h2><p>Every time you visit a website, open an app, or connect to an online service, your device first needs to find out where that service lives on the internet. It does this using something called <strong>DNS</strong>. Most people never think about it, but DNS is one of the biggest sources of personal data on the internet.</p><p>At <strong>NCFA Global</strong>, we believe everyone deserves access to private internet infrastructure, regardless of whether they can afford expensive privacy services or host their own. That's why we built <strong>NCFA Privacy-First DNS</strong>. A free, public DNS resolver designed around one simple principle:</p><blockquote><p><strong>Privacy by default.</strong></p></blockquote><hr><h1>What is DNS?</h1><p>DNS (Domain Name System) is often described as the internet's phonebook.</p><p>Instead of remembering IP addresses like:</p><pre><code>57.129.129.227</code></pre><p>you simply type:</p><pre><code>ncfa-global.com</code></pre><p>Your device asks a DNS resolver where that website is located, receives the correct address, and connects you automatically.</p><p>This happens thousands of times every day on your phone, laptop, smart TV and even many smart home devices.</p><h1>Why does DNS matter for privacy?</h1><p>Every DNS lookup reveals something about what you're doing online.</p><p>For example:</p><ul><li><p>Which websites you're visiting</p></li><li><p>Which apps you're using</p></li><li><p>Which services your devices connect to</p></li><li><p>When those requests were made</p></li></ul><p>Many traditional DNS providers log this information to improve services, analyse traffic, troubleshoot networks or provide statistics.</p><p>While many providers have excellent privacy policies, we wanted to ask a different question:</p><p><strong>What if the data simply didn't exist in the first place?</strong></p><hr><h1>Our approach</h1><p>Instead of forwarding your DNS requests to another company, our resolver performs the lookups itself.</p><p>That means your requests aren't passed through multiple third-party DNS providers before reaching their destination.</p><p>Our infrastructure was built from the ground up with privacy as the primary objective.</p><hr><h1>What makes NCFA Privacy DNS different?</h1><h2>✅ No query logging</h2><p>We don't keep a history of the websites you look up.</p><p>Our infrastructure is designed so DNS queries are processed in memory without creating permanent browsing logs.</p><h2>✅ No third-party upstream resolvers</h2><p>Many DNS services forward requests to larger public DNS providers.</p><p>We don't.</p><p>Our resolver communicates directly with the global DNS infrastructure, reducing unnecessary third-party involvement in the lookup process.</p><h2>✅ Encrypted DNS</h2><p>We support modern encrypted DNS standards, including:</p><ul><li><p>DNS-over-HTTPS (DoH)</p></li><li><p>DNS-over-TLS (DoT)</p></li><li><p>DNS-over-QUIC (DoQ)</p></li></ul><p>These protocols help prevent others on your network—such as public Wi-Fi operators or internet providers—from easily seeing your DNS requests while they're in transit.</p><h2>✅ Privacy-focused ad &amp; tracker blocking</h2><p>Our resolver blocks known advertising and tracking domains using two well-respected community-maintained blocklists:</p><ul><li><p><strong>AdAway Default Blocklist</strong></p></li><li><p><strong>AdGuard DNS Filter</strong></p></li></ul><p>Unlike many filtered DNS services, we <strong>don't</strong> block social media, news websites, streaming services or other categories of content.</p><p>The goal isn't to decide what you should access.</p><p>The goal is simply to reduce unnecessary advertising and tracking.</p><h2>✅ DNSSEC Validation</h2><p>Every DNS response is cryptographically validated before being returned.</p><p>This helps protect against certain forms of DNS spoofing and tampering.</p><h2>✅ Built for performance</h2><p>Privacy shouldn't make your internet slower.</p><p>Our recursive infrastructure uses intelligent caching and modern DNS standards to deliver fast response times while maintaining strong privacy protections.</p><hr><h1>What we don't do</h1><p>Transparency matters.</p><p>Our Privacy-First DNS is <strong>not</strong> designed to:</p><ul><li><p>Filter the internet</p></li><li><p>Block websites based on opinion or category</p></li><li><p>Monitor browsing habits</p></li><li><p>Sell usage data</p></li><li><p>Build user profiles</p></li><li><p>Display advertising</p></li></ul><p>Our focus is straightforward:</p><p><strong>Private, secure and reliable DNS resolution.</strong></p><hr><h1>Who is this for?</h1><p>Our resolver is ideal for:</p><ul><li><p>Individuals who value online privacy</p></li><li><p>Families looking for a trustworthy public DNS</p></li><li><p>Students</p></li><li><p>Small businesses</p></li><li><p>Developers</p></li><li><p>Privacy-conscious organisations</p></li></ul><p>Whether you're replacing your ISP's DNS or looking for an alternative public resolver, getting started only takes a few minutes.</p><hr><h1>Getting Connected</h1><p>You can connect using whichever method your device supports.</p><h2>DNS-over-HTTPS (DoH)</h2><p>Server:</p><pre><code>57.129.129.227</code></pre><p>Template:</p><pre><code>https://dns.ncfa-global.com/dns-query</code></pre><h2>DNS-over-TLS (DoT)</h2><p>Server:</p><pre><code>dns.ncfa-global.com</code></pre><p>Port:</p><pre><code>853</code></pre><h2>DNS-over-QUIC (DoQ)</h2><p>Server:</p><pre><code>dns.ncfa-global.com</code></pre><p>Port:</p><pre><code>853</code></pre><h2>Traditional DNS</h2><p>IPv4:</p><pre><code>57.129.129.227</code></pre><hr><h1>Frequently Asked Questions</h1><blockquote><p>Is it free?</p></blockquote><p>Yes, NCFA Privacy-First DNS is provided free of charge.</p><blockquote><p>Do I need an account?</p></blockquote><p>No. There are no accounts, subscriptions or registrations required.</p><blockquote><p>Will this make my internet anonymous?</p></blockquote><p>No. DNS privacy protects your DNS lookups. It does not hide your IP address from websites you visit or replace a VPN.</p><blockquote><p>Will it block adverts?</p></blockquote><p>It blocks many known advertising and tracking domains using the AdAway Default Blocklist and the AdGuard DNS Filter. Some adverts may still appear depending on how a website delivers them.</p><blockquote><p>Is this open to everyone?</p></blockquote><p>Yes. Anyone can use the service.</p><hr><h1>Our Philosophy</h1><p>Privacy shouldn't depend on expensive subscriptions, specialist hardware or technical knowledge.</p><p>The internet should respect people's privacy by design—not treat it as an optional upgrade.</p><p>That belief is what inspired the NCFA Privacy-First DNS project, and it's what continues to guide its development.</p><p></p><pre><code>NCFA Global Limited
National Cyber &amp; Forensics Alliance
Privacy. Security. Trust.</code></pre><p></p>

Research and findings,
written by our members

Privacy-First DNS by NCFA Global

Research and findings, written by our members

Privacy-First DNS by NCFA Global

Research and findings,
written by our members