Windows DNS Setup

Use custom DoH where Windows exposes it

DNS over HTTPS

Supported Windows builds can associate a resolver address with a DoH template:

https://website-xnqsyvgcprzaash17upkc5cd.DE-FRA-COG.ledns.infra.rqsco.cloud/dns-query

The exact Settings UI and PowerShell cmdlets vary by Windows release and policy. When the network adapter exposes encrypted DNS, select a custom template, enter the URI above and disable plaintext fallback if strict encryption is required.

Use the current Microsoft DNS Client documentation for the installed Windows build rather than assuming an “Automatic” template already knows le_dns.

Classic DNS

For an adapter that does not support a custom DoH template, configure:

• 51.75.96.82
• 51.89.95.33
• 151.115.80.165

This is unencrypted port-53 DNS.

Browser-only fallback

Firefox and Chromium-family browsers can use the custom DoH endpoint without changing system DNS. That protects only traffic resolved by that browser. See the DoH guide.

Verify

Run:

Resolve-DnsName example.com
Get-DnsClientServerAddress

A valid answer proves resolution. Use Windows resolver diagnostics or a packet capture when you need to prove that DoH, rather than plaintext fallback, was used.