RCODE 3 · NAME ERROR · nxdomain.co
Serving DNS. Not ads.
A private WireGuard network with its own ad-blocking resolver, managed from one console. Run by people who read the RFCs.
How it works
01 / resolver
Ad-blocking DNS
A recursive resolver that answers "not found" for advertising, tracking and malware names, so pages load without the baggage. It lives behind the VPN, validates DNSSEC, forwards over encrypted transport and keeps no query logs.
What it blocks02 / tunnel
WireGuard, road-warrior style
Each device carries one tunnel configuration and can reach the network from anywhere. Servers are brought up and torn down from the console, and every device key is managed in one place.
The console03 / tools
Check what you are using
Two small tools show what the rest of the internet sees from your connection, and which resolvers are really answering your lookups. Useful before and after any DNS or VPN change.
My ResolversWhat this is
nxdomain.co is a private network for a small group of people: a few WireGuard servers in a few places, an ad-blocking resolver reachable only through the tunnel, and a console that manages the keys, the servers and the DNS records that tie them together. Accounts are by invitation.
- Network
- Private, by invitation
- Tunnel
- WireGuard, one config per device
- Resolver
- Behind the tunnel, no query logs
- Console
- In development
- Public resolvers
- Retired 2024