IP address Archives

Tech Optimizer

August 24, 2026

Fake Microsoft security scans trick victims into uninstalling their antivirus

A surge of fraudulent websites claiming to verify antivirus software functionality has emerged, using the name SysScan and misleadingly asserting that Windows no longer supports third-party antivirus solutions. These sites conduct fake security scans, gather personal information, and set up a refund scam. Eleven such websites were found hosted on a single server, executing similar deceptive tactics. They can access basic browser data but cannot conduct genuine security scans. Microsoft continues to support third-party antivirus software, and legitimate refund processes do not require uninstalling security tools. The scams instruct users to remove their antivirus software to facilitate further manipulation and to collect information about the antivirus in use. The customer information forms collect extensive personal data and are designed to send this information to a Telegram bot API. Victims are promised a refund call after submitting their information, which is part of the scam's manipulation. Signs of such scams include claims of deep problems with the computer, consistently negative diagnostic results, requests to uninstall antivirus software, and demands for banking information. If affected, victims should disconnect from the internet, remove remote-access tools, and contact their bank. The hosting IP address for these sites is 157.230.180.90, with multiple associated domains listed.

Tech Optimizer

August 21, 2026

How to get a 24-month Surfshark subscription for $2.49 per month

Surfshark offers a suite of online security services, including antivirus software, personal data removal tools, and IP masking, to protect personal data. Currently, it has significant discounts on its plans, such as the Starter plan at an 85% discount, costing .49 per month for a 24-month subscription, plus three additional months free. The Starter plan includes a secure VPN, ad and cookie pop-up blockers, rotating IP, double encryption, app bypass options, and an alternative ID feature. The Surfshark One plan, also at .49 per month, adds antivirus protection, an email scam checker, a web content blocker, a private browsing feature, and data leak alerts. The Surfshark One Plus plan, available for .49 per month, includes all features from the Surfshark One plan and adds online data removal assistance and identity theft protection for US users. Surfshark operates under a no-logs policy and includes a kill switch for added security. The alternative ID feature generates fictitious personal information to reduce spam.

AppWizard

August 21, 2026

How a Decade-Old Samsung Laser Printer Became a Minecraft Host Server

A Samsung C410W printer has been repurposed by a maker named vimpo to host a Minecraft server, leveraging its debug serial port and LAN Test Protocol. The printer, despite being from the mid-2010s, features Wi-Fi connectivity and has 23 megabytes of RAM. Vimpo crafted a payload to redirect execution to activate the printer's status lights, allowing the lightweight UCraft server to run. This server, with a binary size of about 46 kilobytes, enables basic gameplay for a single player but has limitations in processing power, leading to lag when multiple players connect. The exploit and server code are publicly available for others to replicate this project.

Tech Optimizer

August 20, 2026

Hackers Are Using a Fake Roblox Cheat To Access Your Webcam and Steal Data

Roblox is facing privacy concerns due to spyware disguised as an "undetected" version of the Xeno Roblox cheat tool. This malware can access screens, record keystrokes, and activate webcams, allowing attackers to execute remote commands. The infection begins when users download a file resembling a legitimate Xeno installation, often shared on platforms like Discord. The malware, previously known as Powercat, has evolved and operates in three stages: 1. The user executes a file named Xeno.exe, which checks for Java and extracts it if necessary. 2. The malware runs a JAR file disguised as decompiler.exe, performing checks to avoid detection. 3. It masquerades as a legitimate Windows DLL file, logging activities and attempting to escalate privileges. If successful, the malware can control the victim's system, access webcams, log keystrokes, and steal sensitive information, including cryptocurrency wallet credentials. To protect against this spyware, users are advised to avoid unofficial cheats, use antivirus software, refrain from clicking unsolicited links, enable two-factor authentication, inspect User Account Control prompts, and consider identity theft protection services.

AppWizard

August 14, 2026

I tested an Android app that lets anyone fight censorship – and shows your impact in real time

Snowflake Volunteer is a newly launched Android app available on the Google Play Store, created by the Tor Project, that allows users to contribute to internet freedom by transforming their smartphones into proxies for the Tor Network. It is a collaboration between Bloco, the Tor Network, and Guardian Project, building on the original Snowflake initiative from 2019. The app connects users needing access to the Tor Network, particularly in regions with heavy internet restrictions, by simulating user traffic as a video call via WebRTC and using dynamic proxies. Users can customize settings such as enabling/disabling the app, charging preferences, Wi-Fi operation, background operation, and connection limits. The app is open-source and available on both Google Play and F-Droid. Testing indicates that it does not significantly drain battery life, showing only a gradual decline over three hours with multiple connections. The app aims to enhance the robustness of the Snowflake network, making it harder for oppressive regimes to impose restrictions.

Winsage

August 7, 2026

Exclusive: Turbo VPN releases emergency Windows update after TechRadar uncovers persistent IP leaks

Turbo VPN's Windows client has faced significant privacy issues, including active IP leaks and misconfigured protocols. Owned by Innovative Connecting Pte. Limited in Singapore, it has over 500 million downloads on Android. Initial testing revealed that version 3.6.0.0 did not resolve IPv6 address leaks, despite IPv4 addresses being masked. A subsequent update, version 3.7.0.0, successfully blocked unencrypted IPv6 traffic while maintaining IPv4 masking. Testing showed that the proprietary protocol Lepus functions differently from standard VPNs, routing non-browser data through a local proxy without encryption. Turbo VPN's response indicated that the observed issues were limited to specific network configurations, and they have since implemented improvements in the latest version. However, detailed information about their proprietary protocols remains unavailable.

AppWizard

August 5, 2026

Why Running Your Own Minecraft Server Is Still Worth It in 2026

In 2026, players have three primary options for hosting Minecraft servers: self-hosting on personal computers, free hosting services, and paid hosting plans. Self-hosting offers complete control but requires maintenance and can lead to performance issues as player numbers grow. Free hosting is suitable for casual play but has limitations like restricted RAM and player slots. Paid hosting provides dedicated resources, DDoS protection, automatic backups, and technical support, making it a reliable choice for larger communities. Owning a server allows for customization of game settings, mods, and player access, enhancing the gaming experience. However, self-hosting can expose users to security risks and requires network configuration. Upgrading to paid hosting is advisable for those needing more resources, reliability, and support.

Winsage

August 3, 2026

Meet deGDID: Windscribe’s answer to the Windows tracker that VPNs cannot mask

Windscribe has introduced deGDID, a tool aimed at countering the Global Device Identifier (GDID), a Windows tracking mechanism that can trace user activities despite VPN usage. The GDID is a persistent identifier assigned to individual Windows installations, remaining unchanged through updates but reset during a clean reinstallation. It can link telemetry data and browsing history to a specific device, allowing Microsoft to track users across different sessions. deGDID works by modifying the hosts file and implementing firewall rules to prevent Windows from retrieving the GDID and to erase local identity artifacts. Users can download and execute the degdid.ps1 script from GitHub in PowerShell, which includes options for checking status, blocking the GDID, and reversing changes. The tool is not designed for corporate machines and may disrupt access to services like Xbox and Outlook due to its firewall rules. Windscribe warns that it cannot guarantee the complete eradication of GDID pathways or existing records held by Microsoft.

Tech Optimizer

July 28, 2026

Migrate self-managed PostgreSQL to Amazon RDS using the RDS console

Running PostgreSQL on Amazon EC2 requires users to manage operational tasks such as patching, backups, and security. Migrating to Amazon RDS for PostgreSQL or Amazon Aurora PostgreSQL-Compatible Edition offers a fully managed service that automates these tasks, allowing development teams to focus on application development. The migration process uses the auto-migration feature in the Amazon RDS console, supported by AWS Database Migration Service (AWS DMS), which facilitates PostgreSQL-to-PostgreSQL migrations using native tools for accurate schema mapping and faster migration. The migration can be executed using various methods, including pg_dump/pg_restore, manual AWS DMS tasks, or third-party tools, with the RDS console approach being preferred for its reliability and minimal setup effort. AWS DMS supports three replication modes: full load, CDC only, and full load + CDC, with the migration duration depending on database size and network throughput. Prerequisites for migration include having a source PostgreSQL 10.4+ on Amazon EC2, a target RDS for PostgreSQL or Aurora PostgreSQL, proper IAM roles, stored credentials in Secrets Manager, and appropriate networking configurations. Considerations include unsupported objects, potential issues with sequence values, and the need to avoid schema changes during CDC. The migration involves preparing the source database, creating necessary users and permissions, and executing the migration through the RDS console. Post-migration, it is essential to verify data integrity, optimize performance by updating statistics and rebuilding indexes, and implement security best practices such as disabling the DMS user and enforcing SSL/TLS connections. Common troubleshooting errors during migration include permission issues, incorrect WAL levels, and connection refusals, each with specific resolutions. Finally, to avoid ongoing charges, it is recommended to clean up resources created during the migration process, including deleting the DMS migration task, logical replication publications, Secrets Manager secrets, and the target RDS/Aurora instance.

Tech Optimizer

July 25, 2026

Scrappy RAT Malware Targets Chrome And Edge Users

A new remote access trojan (RAT) named msaRAT has been identified by Cisco Talos, linked to the Chaos ransomware group and built using Rust. It exploits Chrome and Edge browsers to disguise its traffic and evade detection. MsaRAT operates through a headless browser process, enabling remote code execution and facilitating ransomware deployment, data theft, and other malicious activities. It is typically installed via phishing emails or malicious files, making it resistant to standard browser patches. Cisco Talos recommends specific SNORT rules and a ClamAV signature for detection. Indicators of Compromise (IoC) include traffic to the IP address 172.86.126.18 and the domain is-01-ast.ols-img-12.workers.dev. The malware primarily targets large organizations, but individual users may also be at risk.