diff --git a/etc/unbound/unbound.conf.d/dns-over-tls.conf b/etc/unbound/unbound.conf.d/dns-over-tls.conf
index cc1f0a6e..7bb82bdc 100644
--- a/etc/unbound/unbound.conf.d/dns-over-tls.conf
+++ b/etc/unbound/unbound.conf.d/dns-over-tls.conf
@@ -12,6 +12,8 @@ server:
 # This list is for my travel laptop to have at least one DoT443 server
 # which seems to be applied-privacy.net. They advice having multiple DoT servers
 # for redundancy and as they don't filter, it's best I use other non-filtering ones.
+# Since then this expanded to include <https://www.privacyguides.org/en/dns/>.
+# just look at git blame...
 
 forward-zone:
 	name: "."
@@ -23,6 +25,22 @@ forward-zone:
 	forward-addr: 2a02:1b8:10:234::2@853#dot1.applied-privacy.net
 	forward-addr: 146.255.56.98@853#dot1.applied-privacy.net
 
+	# Cloudflare unfiltered, anycast, no ECS
+	forward-addr: 2606:4700:4700::1111@853#cloudflare-dns.com
+	forward-addr: 2606:4700:4700::1001@853#cloudflare-dns.com
+	forward-addr: 1.1.1.1@853#cloudflare-dns.com
+	forward-addr: 1.0.0.1@853#cloudflare-dns.com
+
+	# Mullvad unfiltered, Anycast Sweden, no ECS
+	forward-addr: 194.242.2.2@853#dns.mullvad.net
+	forward-addr: 2a07:e340::2@853#dns.mullvad.net
+
+	# Control D Free DNS unfilterd, anycast, no ECS
+	forward-addr: 76.76.2.0@853#p0.freedns.controld.com
+	forward-addr: 2606:1a40::@853#s0.freedns.controld.com
+	forward-addr: 76.76.10.0@853#p0.freedns.controld.com
+	forward-addr: 2606:1a40:1::@853#s0.freedns.controld.com
+
 	# Quad9 unfiltered, anycast, no ECS, no DNSSEC (Unbound does that)
 	forward-addr: 2620:fe::fe:10@853#dns10.quad9.net
 	forward-addr: 2620:fe::fe:10@8853#dns10.quad9.net