DoH / DoT filtering — works on any device, no install needed
Total queries
—
last 24h
Blocked
—
Resolvers
—
active tokens
Create resolver
Each resolver gets its own DoH URL with its own filtering policy.
No resolvers yet
Create your first resolver to get a DoH URL
Your DNS-over-HTTPS URL
Paste this into your device, browser, or router settings.
—
Copied!
Setup instructions
Settings → Network & Internet → Wi-Fi or Ethernet → Edit DNS server assignment
Switch to Manual, enable IPv4
Under Preferred DNS → set DNS over HTTPS to On
Paste your DoH URL and click Save
—
One-click setup
Download and run as Administrator to configure DNS automatically via a background cloudflared proxy. Works on Windows 10 and 11.
System Settings → Network → your connection → Details → DNS
Click + under DNS Settings → choose Encrypted DNS → Custom
Paste your DoH URL → OK → Apply
—
One-click setup (macOS Ventura+)
Download and double-click to apply Tareeq DNS system-wide via an Apple configuration profile. No Terminal needed.
For system-wide protection, install the Tareeq config profile below
Or: Settings → Wi-Fi → tap network → Configure DNS → Manual
iOS / iPadOS profile
Applies DoH system-wide via a configuration profile.
Settings → Network & Internet → Private DNS → Custom provider
Enter hostname only (no https://)
Android Private DNS uses DoT (port 853). For DoH, use a DoH-capable app such as Intra or AdGuard.
—
OpenWrt / pfSense / OPNsense
Network → DNS → DNS over HTTPS → paste URL
Asus Merlin / DD-WRT
WAN → DNS → DoH Server → paste URL
Unifi / Firewalla
Settings → Internet → DNS → Custom DoH
—
Firefox Settings → Privacy & Security → DNS over HTTPS → Max Protection
Choose Custom and paste your URL
—
Chrome Settings → Privacy and security → Security → Use secure DNS
Switch to With a custom provider and paste your URL
—
Download the shell script below
Open a terminal and run: sudo bash tareeq-dns.sh
DNS filtering activates immediately and survives reboots
Linux setup script
Installs cloudflared as a systemd service and routes all DNS through your Tareeq resolver. Supports x86_64, arm64, and armv7.
Query Logs
DNS query history for your resolvers
🔍AI Threat Analysis
Scanning domains with Tareeq…
Scanning concurrently — usually done in ~10s
Scanned
—
Block recommended
—
Suspicious
—
Safe
—
Threat categories detected
Policy recommendations
Per-domain verdicts
Total queries
—
Blocked
—
Allowed
—
Block rate
—
TOP BLOCKED
—
TOP ALLOWED
—
Showing last 24h · up to 50 queries. Subscribe for full history and advanced filtering.
Top Domains
Run AI Threat Scan to see verdicts
Domain
Queries
Blocked
Allowed
AI Verdict
Action
Select a resolver to view domains
Recent Queries
Domain
Type
Verdict
Latency
Time
Action
Select a resolver to view query logs
AI Insights
PRO
AI-powered DNS traffic analysis · anomaly detection · threat intelligence
✦
AI Insights — PRO Feature
Get AI-powered analysis of your DNS traffic: anomaly detection, threat signals, domain categorisation, and policy recommendations — powered by your choice of AI engine.
Sending to AI engine — this may take 20–60 seconds
📡
No analysis yet
Click "Analyze now" to run your first AI analysis of DNS traffic patterns.
—/ 100
Risk Score
Low
No threats detected
Total Queries
—
—
Anomalies
—
Suggestions
—
No suggestions
AI Summary
—
Threat Signals
Query Verdict Breakdown
Allowed —
Blocked —
Cached —
Block rate—
Top Domains Analysis
Domain
Queries
Blocked
Cached
Risk
No data
Detected Anomalies
✓
No anomalies detected
Domain Categories
No categories detected
Top Blocked Domains
No blocked domains
Policy Recommendations
No policy changes recommended
Analysis by —·—·—
Settings
Account
Email—
Planfree
Two-Factor Authentication
Protect your account with TOTP (Google Authenticator, Authy, 1Password).
Status—
Scan with your authenticator app Then enter the 6-digit code below.
Loading...
Can't scan? Use this secret:
—
Disable two-factor authenticationEnter a code from your authenticator to confirm.
AI Assistant
PRO
Configure the AI provider for AI Insights and the chat assistant.
AI features are available on the PRO plan.
Private AI (Tareeq) — uses your self-hosted dns-ai-threat-engine on Railway.
No API key needed. All data stays within your infrastructure.
Responses take 2–5 seconds (conversational) or 15–20s (domain threat scan).
No key saved
Tareeq AI
Free tier · Groq
Hi! I'm your Tareeq DNS assistant.
Ask me about filtering setup, blocked domains, DoH configuration, or anything DNS.