I was using DoH via, and my DNS forwarder can no longer connect.

msg=“failed to connect to an HTTPS backend “””

Is this URL down/broken?


1 Like

It’s not working for me either. Had to go back to in the mean time. I even tried with no luck


Error 1000: DNS points to prohibited IP


Not intended to work as a website.

Not a DoH endpoint.

To test one might try, the command below.

curl -H 'accept: application/dns-json' ''

That’s… how DoH works. I get the exact same error using cURL.

$ curl -H 'accept: application/dns-json' ''
<!DOCTYPE html>
<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>    <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>    <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]-->
<title>DNS points to prohibited IP | | Cloudflare</title>
... is, and I use it to seed the A/AAAA records for normally. network.trr.bootstrapAddress in Firefox. is not. There’s no SSL certificate issued for, it is not included in the setup instructions as a DoH endpoint.

Got it. Regardless, DoH does seem to be broken for

@cscharff It was posted it was a DoH endpoint:


  • Does for Families support DNS over HTTPS?
    • Yes, to block malware, use , to block malware & adult content, use .

Sorry, I think the confusion here is my fault. @cscharff was saying that isn’t a DoH endpoint; he wasn’t talking about

The issue here is that is down. DoH requests to it fail. @cscharff indicated that receiving a cryptic error when visiting it in a browser it to be expected; however, it’s the same error message that’s received when attempting to query it via DoH, which is why I quoted it. It’s easier to read in a web browser than with cURL, since it’s HTML.

@cscharff, is most certainly down, at least when hitting EWR. That 1000 error is the same one I receive when I use cURL.

1 Like


Thanks for the report… I’ll ask someone to check EWR, it’s working for me against DFW and other folks who tested in other geos haven’t reported an issue.


I can confirm it’s working for me from IAD. Here’s an EWR ray that failed: 57fd02d5493ee71c

Thanks to you both! Here’s the one that failed for me. Ray ID: 57fd105f19f5f778

It seems to be working at LAX for me with Firefox but not cloudflared on my pihole.

Seems to have been fixed for me now

1 Like

Sorry, I spoke too soon. While now gives a valid page, does not give any valid DNS responses.

1 Like

Well now doesn’t even give a valid page:

Error 1000 Ray ID: 5804c27b5b75c7d5 • 2020-04-07 15:25:10 UTC

DNS points to prohibited IP

Expected. Not a web page.

time="2020-04-07T09:33:19-06:00" level=error msg="failed to connect to an HTTPS backend \"\"" error="failed to perform an HTTPS request: Post net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)"