Tools
DNS Safe Browsing
Every device on the tunnel resolves through the OwlGate resolver. Switch on the categories you want filtered and dangerous lookups are refused before a single packet leaves your device — with a plain-English reason instead of a broken page.
Primary resolver
10.66.0.1
Secondary
10.66.0.2
DNS-over-HTTPS
https://dns.owlgate.uk/dns-query
DNS-over-TLS
tls://dns.owlgate.uk
Safe Browsing
Loading your settings…
Category blocklists
Lists refresh hourly from upstream threat feeds. Toggles are stored on this device only.
Malware & botnets
Critical riskKnown malware droppers, command-and-control hosts and exploit kits.
~1.2M domains
Block reason shown: “This domain is on a malware and botnet blocklist. Loading it can install spyware or hand control of your device to someone else.”
Phishing & fake logins
Critical riskCloned bank, HMRC, parcel and webmail login pages.
~410k domains
Block reason shown: “This domain is a reported phishing site. It imitates a real login page to capture your password or card details.”
Advertising
Low riskAd exchanges and banner networks, blocked before the request leaves your device.
~180k domains
Block reason shown: “This domain serves advertising and is blocked by your Advertising filter.”
Trackers & telemetry
Medium riskCross-site analytics, fingerprinting and app telemetry endpoints.
~95k domains
Block reason shown: “This domain is a cross-site tracker. It profiles what you read and where you go, so your Trackers filter stopped the lookup.”
Crypto-mining
High riskBrowser miners that quietly burn your battery and data.
~12k domains
Block reason shown: “This domain runs a browser crypto-miner. It uses your processor and battery to mine coins for someone else.”
Scam shops & fake parcels
High riskThrowaway storefronts, delivery-fee scams and fake refunds.
~60k domains
Block reason shown: “This domain is a reported scam storefront or fake-delivery page. Payments made here are rarely recoverable.”
Adult content
Medium riskAge-restricted sites. Useful on family or shared devices.
~2.1M domains
Block reason shown: “This domain is categorised as adult content and your Adult content filter is switched on.”
Gambling & betting
Medium riskCasinos, sportsbooks and loot-box shops — handy for self-exclusion.
~140k domains
Block reason shown: “This domain is a gambling or betting site and your Gambling filter is switched on.”
Social media
Low riskOptional focus filter for work or study hours.
~3k domains
Block reason shown: “This domain is a social network and your Social media focus filter is switched on.”
Newly registered domains
Medium riskDomains under 30 days old — the favourite tool of scam campaigns.
rolling 30-day feed
Block reason shown: “This domain was registered in the last 30 days. Brand-new domains are overwhelmingly used for short-lived scams, so your filter holds them back.”
Check a domain
Paste a link to see exactly what the resolver would answer and why. Try phishing.testcategory.com.
Always allow
Beats every category list.
- Nothing added yet.
Always block
Blocked even when Safe Browsing is off.
- Nothing added yet.
Recent blocks
No blocks recorded on this device yet. The log keeps the last 40 entries locally and is never uploaded.
How filtering works on the tunnel
OwlGate hands your device the resolver at 10.66.0.1 as part of the tunnel profile. Filtered lookups get 0.0.0.0 back instead of the real record, so the connection is never made. Nothing is logged server-side — the block history above lives only in this browser. Run the leak test to confirm your device is using the OwlGate resolver rather than your ISP's.