You request, we hear, and we implement! Socks 5 Server in the main app - Extend ADFastDNS filtering to any device on your network by directing its SOCKS5 proxy to your ADFastDNS device HIDS: - The intrusion detection system now includes DNS Exfiltration protection, detecting any connections attempting to smuggle data through malformed DNS queries, bypassing HTTP tracking detection Statistics: - We’ve added location statistics for all transparent proxy connections, featuring a stunning world globe animation. Bug fixes and performance enhancements.

You ask we execute! - Statistics are now persistent across sessions with a retention time of 1 week. We have added a button to clear them all - We have completed the process of exposing the Proxy's Data in the statistics, included in this release statistics details related to direct IP connections blocked via firewall / non DNS resolved IP. - We have included a new IP whitelist view where the user can whitelist specific IPs - We have improved the reliability of the transparent proxy with IPv6 - We have improved the performance after the device reboot. Bug Fixes and performance improvements.

We have improved our intrusion detection with brand new features that all run on-device. Beacon Guard Beacon Guard monitors how frequently your device connects to remote servers over time, building a persistent memory of connection patterns across sessions. Malware and spyware often communicate with remote command-and-control servers at regular intervals a technique known as beaconing to receive instructions or exfiltrate data. Unlike standard traffic filters that only inspect individual connections, Beacon Guard detects suspicious periodicity patterns that persist across network changes, IP address rotations, and app restarts, flagging destinations that exhibit metronomic regularity consistent with automated malicious software rather than normal human-driven app usage. TLS Anomaly Detection TLS Anomaly Detection analyses the cryptographic handshake metadata of encrypted connections without inspecting or decrypting any private content. Every encrypted HTTPS connection begins with a negotiation phase that reveals characteristics about the software initiating it the cipher suites it supports, the TLS version it prefers, and the protocol extensions it advertises. Legitimate apps running on iOS produce consistent, well-formed handshakes. Malware, spyware implants, and network intrusion tools frequently produce handshakes with anomalous characteristics missing standard extensions, unusual cipher selections, or cryptographic fingerprints that don't match the software they claim to be. TLS Anomaly Detection scores each connection across fifteen independent indicators, correlating the initial connection request with the server's response to identify suspicious negotiation patterns in real time. Hello Packet Anomaly Detection Hello Packet Anomaly Detection performs deep inspection of TLS ClientHello packets the opening message of every encrypted connection to identify connections that deviate from the patterns produced by Apple's native networking stack. Each TLS implementation leaves a distinct fingerprint in the structure and ordering of its handshake fields. ADFastDNS uses JA4 fingerprinting, a cryptographic identification technique, to classify the TLS stack initiating each connection and cross-reference it against a continuously updated database of known malicious fingerprints. Connections that impersonate legitimate browsers or operating system components, advertise outdated or deliberately weakened cryptographic parameters, or originate from TLS stacks associated with known malware frameworks are flagged and blocked before any data is transmitted. Bug fixes and performance improvements

We are continuing our journey to expose ADFastDNS data to the User: - Added statistics detail about Hello Packets fragmented - JA4 Now support a more detailed statistic view with detailed information about the blocked signature Further Improvements to highlight: -We have improved the heuristic algorithm to detect malware using JA4 which led to a reduction of the database list of 90% (please update the JA4 list to get the benefits of this) - Added SNI White List for Hello Fragmentation this to address servers that may not accept fragmented TLS packets in multiple TLS records - Added an option to enable ADFastDNS for hosts in your local WiFi network Bugs fix and performance improvements

ADFastDNS 4.0: Faster, Cleaner, and More Secure Than Ever. We are incredibly proud to pull back the curtain on ADFastDNS 4.0. This isn't just a minor patch we focused entirely of improving the user experience and the performance. A Reimagined Interface A powerful tool shouldn’t be a headache to use. We have forged a completely new user interface designed to be as intuitive as it is beautiful. The new dashboard provides a "glass box" view of your network, bringing our 3 Pillars of Protection directly to the forefront: DNS Security: Encrypted DNS and ADs blockers are the foundation of privacy, Real-time threat intelligence to block malicious domains before they even reach your device Anti-DPI: Stop your ISP to catalog your navigation and filter your traffic HIDS: On Device Intrusion detect system that protects your personal data to flight on a malicious server. We have also updated the onboarding section to reflect all the above. Want to dive deeper? Our Support Page contains technical breakdowns and a guide on how to get the most out of it.

- Completely revamped statistics section with new data. - Bugs fix and performance improvements

- Added strict domain validation in User's blocklist/whitelist - Added Toggle to enable/disable biometric authentication for statistics. Bug fixes and performance improvements

Bug fixes and performance improvements

Trial Duration is now 7 days. Bug Fixes and Performance Improvements

Bug Fixes and performance improvements

- Geo IP Firewall: You can now setting blocking rules per country - ASN (Autonomous System Numbers) IP List: Is now used to significantly reduce the false positives detected in TLS SNI/IP protection feature As always bug fixes and performance improvements for the best user experience.

Bug Fixes and Performance Improvements

Bug Fixes and Performance Improvements

1) You can set a second DNS/DoH URL for redundancy and privacy, the queries will be randomly resolved by one of the two. Using this strategy no single DNS server would be aware of your entire browsing history. 2) The Home and Statistics views got a major revamp Bug Fixes and Performance improvements

Version 3.1 introduces advanced new HIDS protections. These include: - Advanced tracker protections with cloak protection and deep analysis of all resolved chains.   - The Tunnelling Protector prevents DNS tunnelling, a technique used by attackers to bypass security measures like firewalls and exfiltrate data or establish command-and-control.  - The Rebinding Protector stops DNS rebinding attacks where malicious websites use your browser as a bridge to attack smart home devices or routers, preventing external websites from resolving to local IP addresses like 192.168.1.1. Statistic view data can now be manually updated by scrolling down past the boundary.   There are also bug fixes and under-the-hood performance improvements.

Bug Fixes and Performance Improvements

Bug Fixes and Performance Improvements

Added Biometric authentication to protect the statistics view Bug Fixes and Performance improvements.

Version 3.0 introducing a significant evolution in ADFastDNS enabling a third leg of protection for the user HIDS (Host Intrusion Detection System) monitors and analyses your device’s network traffic in real-time. It detects and eventually blocks potential malicious activity using heuristic models and signature-based detection. Importantly, no information is sent to an external server; everything is processed on the device. Anti Malware and Anti Spyware Protection: This anti-malware and anti-spyware protection offers a comprehensive blocking list to safeguard your device against even sophisticated spyware like Pegasus. IP Firewall: Similar to a standard industry firewall, you can blacklist any IP to protect your device from malicious hosts. HearthBit Detection: This feature detects and blocks bot activities. Blocking Direct IP Connections: You can block direct IP connections that don't belong to any hostname. TLS-SNI Lookup: This feature blocks connections that mismatch the TLS-SNI hostname and destination IPs. JA4 Fingerprint: It blocks malicious JA4 TLS signatures using standard industry blocking lists. Bug Fixes and performance improvements. As we always listen from your feedback we have improved the user experience in the statistics view.

Bug Fixes and performance improvements.

IP Firewalli: You can blacklist any IP to protect your device connecting with malicious hosts likewise a standard industry firewall. WiFi whitelist: You can configure a WiFi whitelist to exclude specific SSIDs from the proxy. Anti Malware and Anti Spyware Protection: This anti-malware and anti-spyware protection offers a comprehensive blocking list to safeguard your device against even sophisticated spyware like Pegasus. Local Resolver: You can configure a local DNS resolver in your device that would behave like an hostfile. Bug fixes and performance improvements.

Added two new Anti DPI features: 1) Hello Packets Fragmentation into TLS Records: Splits Hello Packet SNI across packets and adds header overhead taking the raw ClientHello and splits it into two valid TLS Records 2) Tail Padding: Randomized burst of dummy packets before closing a TCP connection which would confuse the DPI system and make it unable to generate a traffic signature Bug fixes and performance improvements.

Added statistics for TLS Hello Packets fragmentation Bug Fixes and Performance Improvements

Bug Fixes and performance improvements

Added experimental IPv6 support for the transparent proxy Now users can choose to enable/disable IPv6 on the DNSoH and Transparent Proxy using two different toggles Bug fixes and performance improvements.