DNS Archives

AppWizard

February 11, 2026

Product showcase: PCAPdroid analyzes Android app network activity

PCAPdroid is a free, open-source application for monitoring network traffic on Android devices. Users can capture traffic by accepting a VPN request and can view active and historical connections, detailing the application, protocol, destination address, and connection status. Traffic can be categorized by application, providing information such as installation date, version, and permissions. PCAPdroid offers various dump modes, allowing users to view traffic in real-time or save it as a PCAP file, and enables sharing captures via a local web page or forwarding live traffic to another machine using UDP or TCP. The app can extract information from captured traffic, including DNS requests, TLS server names, and HTTP requests. It also has the capability to decrypt HTTPS/TLS traffic, which requires a setup process involving a helper add-on and a certificate. Successful decryption allows users to view and export previously encrypted traffic, although not all apps support this feature.

Tech Optimizer

January 30, 2026

NordVPN blocks 92% malicious sites in independent phishing test

NordVPN successfully blocked 92% of phishing websites in an evaluation by AV-Comparatives, highlighting the effectiveness of its anti-malware tool, Threat Protection Pro. The assessment, conducted from January 7 to January 19, 2026, analyzed 250 phishing URLs, with NordVPN's Threat Protection Pro ranking fourth among tested products. The tool is designed to protect users from various online threats and operates at the network level, scanning traffic directly on the user's device. Threat Protection Pro is available to higher-tier subscribers on the Plus, Complete, and Ultra plans, and is compatible with Windows and macOS. Despite slipping from previous podium finishes, Threat Protection Pro has consistently ranked high in evaluations and was the first VPN service to receive AV-Comparatives' approval for anti-phishing protection in 2024. It also received accolades from AV-TEST and West Coast Labs for its phishing detection capabilities.

TrendTechie

January 30, 2026

США отобрали доменные имена у трех знаменитых торрент-трекеров с многомиллионной аудиторией

Правоохранительные органы США и Болгарии совместно с Европолом провели операцию, в результате которой были изъяты доменные имена у трех крупных болгарских торрент-трекеров, признанных распространителями пиратского контента. Власти Болгарии пытаются закрыть эти ресурсы с 2020 года, но ранее не могли этого сделать из-за нахождения владельцев доменов за пределами страны. DNS-сервера ns1.seizedservers.com и ns2.seizedservers.com теперь под контролем США, и пользователи видят уведомление о конфискации. Судьба серверов, поддерживающих торрент-трекеры, остается неясной, и если они продолжат функционировать, могут появиться новые домены. Болгарские власти также пытались закрыть трекер RARBG, который продолжает работать. Болгария была исключена из списка стран, подлежащих наблюдению в 2018 году, но в 2023 году вновь оказалась в нем из-за недостаточного прогресса в борьбе с нарушениями прав интеллектуальной собственности. Власти Болгарии искали поддержку от ICANN и проводили деловые визиты в США для обсуждения мер против интернет-пиратства.

AppWizard

January 26, 2026

Want to block ads on Android? Here’s why I use an app over Private DNS

A recent poll showed that 65% of Android users block ads using the Private DNS feature, 19% use third-party apps like Blokada, 12% do not block ads at all, and 5% employ alternative solutions. The Private DNS feature allows users to specify a DNS provider for content control but may face challenges like website accessibility issues. In contrast, ad-blocking apps like Blokada use multiple blocklists and Android's VPN service for real-time filtering, offering more customization and control over ad-blocking preferences, though they may consume battery and require manual restarts on some devices. The choice between Private DNS and ad-blocking apps depends on individual user preferences and needs.

Tech Optimizer

January 19, 2026

PDFSIDER Malware Actively Used by Threat Actors to Bypass Antivirus and EDR Defenses

PDFSIDER is a sophisticated backdoor malware that bypasses modern endpoint detection and response systems. It is distributed through targeted spear-phishing campaigns that exploit vulnerabilities in legitimate PDF software. The malware is delivered via spear-phishing emails containing ZIP archives with a trojanized executable disguised as the PDF24 App. When executed, it uses DLL side-loading to load a malicious DLL (cryptbase.dll) alongside the legitimate PDF24.exe, allowing attackers to execute code without detection. PDFSIDER establishes encrypted command-and-control channels using the Botan 3.0.0 cryptographic library with AES-256 in GCM mode and operates mainly in memory to minimize detectable artifacts. It collects system information and executes commands through hidden cmd.exe processes. The malware employs advanced techniques to evade detection in sandbox and virtual machine environments, including checks for available RAM and debugger presence. Indicators of compromise include the malicious file cryptbase.dll and various clean files associated with the legitimate PDF24 application. Organizations are advised to enforce strict controls on executable files, provide user awareness training, and monitor DNS queries and encrypted traffic to detect PDFSIDER communications. The malware's behavior aligns with tactics used in state-sponsored espionage rather than financially motivated cybercrime.

TrendTechie

December 23, 2025

Торрент-платформы останутся популярными в 2025 году благодаря обширным коллекциям и активным сообществам.

In 2025, users are increasingly seeking reliable file-sharing methods via the BitTorrent protocol, with platforms like YTS, 1337x, and The Pirate Bay leading in global traffic. These sites offer millions of files, including movies, TV shows, and games, with dedicated users updating content daily. The BitTorrent protocol enables efficient transfers through active seeders, and many sites prioritize verified torrents to reduce the risk of corrupted files. Community feedback aids users in selecting quality downloads. YTS specializes in high-resolution films and compressed files, while 1337x provides an organized interface for various media. The Pirate Bay continues to operate despite legal challenges, offering a wide range of content. Other notable sites include TorrentGalaxy, Limetorrents, EZTV, NYAA, FitGirl Repacks, RuTracker, IPTorrents, and Torlock, each catering to specific content types or user needs. In Brazil, operators block popular domains due to copyright rulings, prompting users to use mirrors or DNS changes. VPNs are recommended for encrypting traffic during P2P transfers. Recommended clients include qBittorrent, Transmission, and Deluge. Users are advised to check seeders, review community comments, opt for magnet links, and prefer reputable uploaders. In 2025, platforms will cater to diverse needs, with EZTV updating television releases weekly and YTS and 1337x dominating high-resolution film searches. Compressed games and specialized sites like NYAA for anime are also highlighted. Meta-search engines like AIO Search and Torrentz2 help users find torrents across multiple platforms. The BitTorrent protocol is legitimate for distributing open-source files, but users must be responsible in their content selection. Brazilian law differentiates personal downloads from commercial distribution, and prolonged seeding of protected materials may violate rights. Users prioritize privacy and verification methods.

AppWizard

December 1, 2025

Popular YouTube app for Android TV ‘SmartTube’ compromised with malware

The developer of SmartTube, an ad-free YouTube client for Android TV, confirmed a security breach involving the app's signing key, which allowed malicious actors to inject harmful code into app updates. The breach was disclosed by Yuriy Yuliskov, the maintainer, who advised users to avoid reinstalling the old app and instead wait for a newly signed version. A reverse-engineering analysis of the infected APKs revealed that they were gathering sensitive information and transmitting it to a remote server. Versions 28.56 to 30.52 were particularly affected, and Google Play Protect began disabling installations of SmartTube. In response, Yuliskov wiped his hard drive and released a new version, 30.56, with a different signing key and app ID. Transparency concerns remain, and the developer plans to disclose details about the breach and measures to prevent future incidents. Users have requested additional security assurances, including hashes of clean builds.

AppWizard

November 27, 2025

My dad filled his phone with random PDF apps and I blame Google

The author's father struggled to open a PDF on his HONOR phone, despite the device's native office suite supporting PDF files. He downloaded multiple misleading PDF apps from the Play Store, which did not resolve the issue. Eventually, he received a deceptive alert suggesting he update his PDF application, which led him to download yet another app. The problem was resolved when the author advised him to uninstall WPS Office, eliminating the misleading alerts and allowing PDFs to open correctly. A report from Malwarebytes indicated that only 15% of users feel confident identifying scams, highlighting the challenges users face in navigating the Android ecosystem. The Google Play Store has been criticized for hosting low-quality apps and deceptive ads, with a report from Zscaler noting the presence of hundreds of malicious apps. The author emphasizes the need for stricter advertising practices and better management of preinstalled apps to protect less tech-savvy users.

Winsage

November 25, 2025

Microsoft to remove WINS support after Windows Server 2025

Microsoft will remove the Windows Internet Name Service (WINS) from all future Windows Server releases after November 2034. WINS was officially deprecated with Windows Server 2022 in August 2021, and Windows Server 2025 will be the last version to support it. Standard support for WINS will continue until November 2034. Organizations are encouraged to migrate to DNS-based name resolution solutions before this deadline. The removal will include the WINS server role, management console snap-in, automation APIs, and related interfaces. Microsoft recommends auditing services dependent on NetBIOS name resolution and migrating to DNS solutions. Static host files are not advised as a workaround. Organizations should begin migration planning to avoid operational disruptions.

Winsage

November 24, 2025

Microsoft Retires WINS in Windows Server 2025

Microsoft has officially retired the Windows Internet Name Service (WINS) as part of the transition to modern DNS-based solutions. WINS, which resolved NetBIOS names to IP addresses, is being phased out due to its outdated nature and security vulnerabilities. It was deprecated with the release of Windows Server 2022 and will be completely removed in future releases, although support will continue until November 2034. Organizations are encouraged to transition to DNS and identify systems relying on WINS for name resolution. They should implement features like conditional forwarders and update or retire legacy applications that depend on WINS.