This service 'does not record the address of DNS requests - only keep geographic information' to monitor the spread of malicious requests related to domain ', Phil Rettinger, chairman and also COO of GCA said.
Besides the blocked domain, returned with NXDOMAIN information (domain does not exist), the Quad9 also whitelists the never blocked domains, the 'gold list' of never blocked domains like Internet service pages. Famous as Azure or Google, Amazon Web Servies.
The Quad9 updates the threat once or twice a day globally, so it won't have much effect if the malware uses the DNS address to change quickly for C&C. But basically it also protects against phishing attacks, fake domains . Rettinger says GCA is also talking to other popular DNS providers to expand Quad9.
See also: The best and fastest DNS list of Google, VNPT, FPT, Viettel, Singapore