Control D is a customizable encrypted DNS service by Windscribe that supports DoH/3, DoT, DoQ, and plain DNS. The free tier provides preconfigured no-log resolvers. Paid plans add a web dashboard, custom blocklists, per-device profiles, and optional traffic redirection across 100+ locations.
Reviewed by Marcus Holmberg
Control D
controld.com 2 ratings so far*
Threat level
Covered
A covered pick. Anyone can use it as a private drop-in, with no setup or know-how. Enough for most people. Threat levels
Our take
Control D stands out for flexibility: you can combine multiple blocklists, set per-device rules, and optionally route traffic through exit nodes, which no basic resolver offers. The free tier is genuinely useful for ad and malware blocking with no logging. The catch is the full feature set requires a paid plan, and the traffic-redirection option means you are trusting Windscribe’s infrastructure. A strong pick for users who outgrow plain resolvers but do not want a full VPN.
Website at a glance
controld.com
B score 75
Solid website security headers
Graded by Mozilla HTTP Observatory, tested 13d ago
Inspect this site yourself
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
Control D alternatives
NextDNS The major advantage of NextDNS over AdGuard DNS is to be able to configure the service to your needs via parental controls, website restrictions or block whole categories of…
AdGuard DNS Easy to setup within minutes. Comes with setup guides for all systems. You only need to enter two IP adresses.
Mullvad DNS Free public encrypted DNS resolver from Mullvad VPN, supporting DoH and DoT. Available in six filtering variants including ad-blocking, malware, and family-safe options. No account required.
Quad9 Based in Switzerland. Supports: DNS-over-TLS (DoT), DNS-over-HTTPS (DoH) and DNSCrypt.
Nebulo (Android) Non-root, small-sized DNS changer utilizing DNS-over-HTTPS and DNS-over-TLS.
DNSCloak (iOS) Allows for the use for dnscrypt-proxy on an iPhone or iPad, which gives users the ability to encrypt their DNS requests through the use of an on-device VPN profile.
* Average ratings will show on this page once the threshold of 5 ratings is reached.