Notes 
Control D is a customizable encrypted DNS service by Windscribe that supports DoH/3, DoT, DoQ, and plain DNS. The free tier provides preconfigured no-log resolvers. Paid plans add a web dashboard, custom blocklists, per-device profiles, and optional traffic redirection across 100+ locations.
Reviewed by Marcus Holmberg
Control D
controld.com 4.7 (7)
Threat level
Covered
A covered pick. Anyone can use it as a private drop-in, with no setup or know-how. Enough for most people. Threat levels
Our take
Control D stands out for flexibility: you can combine multiple blocklists, set per-device rules, and optionally route traffic through exit nodes, which no basic resolver offers. The free tier is genuinely useful for ad and malware blocking with no logging. The catch is the full feature set requires a paid plan, and the traffic-redirection option means you are trusting Windscribe’s infrastructure. A strong pick for users who outgrow plain resolvers but do not want a full VPN.
Website at a glance
controld.com
B score 75
Solid website security headers
Graded by Mozilla HTTP Observatory, tested 2d ago
Inspect this site yourself
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
Control D alternatives
NextDNS The major advantage of NextDNS over AdGuard DNS is to be able to configure the service to your needs via parental controls, website restrictions or block whole categories of…
AdGuard DNS Easy to setup within minutes. Comes with setup guides for all systems. You only need to enter two IP adresses.
Quad9 Based in Switzerland. Supports: DNS-over-TLS (DoT), DNS-over-HTTPS (DoH) and DNSCrypt.
Nebulo (Android) Non-root, small-sized DNS changer utilizing DNS-over-HTTPS and DNS-over-TLS.
DNSCloak (iOS) Allows for the use for dnscrypt-proxy on an iPhone or iPad, which gives users the ability to encrypt their DNS requests through the use of an on-device VPN profile.
Cloudflare Based in United States. Supports: DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH).