NextDNS

The new firewall for the modern Internet. For help, check out

[NextDNS @NextDNS]

We’re also deprecating the legacy Domain Generation Algorithms (DGA) feature, which relied on public feeds of malware-generated domains. Those feeds are now included in Threat Intelligence Feeds.

[NextDNS @NextDNS]

One in ten newly registered domains is algorithmically generated — tens of thousands each day. Malware, scams and malvertising campaigns use these domains to evade detection and blocking.

Today, we are introducing another new security heuristic — Algorithmically Generated Domains.

By combining advanced lexical and domain similarity analysis with frontier large language models, we can identify and block random-looking character strings, generated word combinations and numbered families — including names that may look ordinary on their own.

This goes far beyond limited lists of known DGA domains and basic entropy checks that attackers can deliberately evade.

Block Algorithmically Generated Domains now in the Security tab.

Follow @NextDNS for more security releases in the coming days.

[NextDNS @NextDNS]

Attackers have increasingly turned to free hosting platforms to spin up phishing sites in seconds and at zero cost — no domain name to register, no DNS records to configure and no infrastructure to manage.

These platforms also let anyone publish under a free domain name of their choice. That openness has created a new, actively exploited attack surface.

Today, we are introducing a new security heuristic to block those free hosting domains automatically across more than 200 platforms.

Once you turn it on, NextDNS blocks all matching domains by default from the very first DNS request. We monitor DNS activity to identify sites for review and make exceptions for legitimate sites.

Block Free Hosting Domains now in the Security tab.

Follow @NextDNS for more Security Month releases in the coming days.

[NextDNS @NextDNS]

Introducing Newly Active Domains (NAD) — a security heuristic few providers offer, and one that’s hard to get right.

NextDNS’s massive worldwide user base provides a baseline of tens of millions of domains with a recent history of activity. NAD lets those through and blocks the rest — even domains registered years ago.

And unlike traditional approaches that let the first visitors through before a domain ends up on some blocklist, NextDNS blocks from the very first DNS request.

Enable Block Newly Active Domains in the Security tab.

Stay put for more Security Month updates. Follow @NextDNS for every release.

[NextDNS @NextDNS]

We’re also deprecating the separate Typosquatting and IDN Homographs features. Both are now covered by AI-Driven Threat Detection.

If you already have AI-Driven Threat Detection enabled, you’re already using the new protection.

[NextDNS @NextDNS]

Today, NextDNS is completely neutralizing the most common type of phishing attack: deceptive domain names.

By combining extensive early domain discovery, advanced multilingual lexical analysis and frontier large language models, we identify and block brand impersonation (including combosquatting, typosquatting and IDN homographs) and other phishing lures. Our zero-hour protection works even before a phishing site goes live.

Now included in AI-Driven Threat Detection. Enable it in the Security tab if you haven’t already.

Stay put for more Security Month updates. Follow @NextDNS for every release.

[NextDNS @NextDNS]

Buckle up for our biggest wave of security upgrades ever — NextDNS Security Month starts tomorrow.

We’ll be rolling out 11 new security features and a radical advance in AI-Driven Threat Detection — built for attack surface reduction and zero-hour protection.

More to come all November. Follow @NextDNS for every release.

[NextDNS @NextDNS]

New feature: Block Rotating Ad Domains

Some ad services rapidly cycle through new domains to evade blocklists. NextDNS recognizes their infrastructure and can block new domains instantly — before popular blocklists catch up.

Enable it now in the Privacy tab.

[Proton VPN @ProtonVPN]

You asked for more control. We heard you.

Custom DNS is now officially supported on iOS and macOS, so now you can specify your own DNS servers, including services like NextDNS or your own recursive DNS.

With this release, custom DNS is now available on all platforms.

1/2

[NextDNS @NextDNS]

New feature for adults only 🔞!

No more uploading photos or government-issued IDs to unknown sites — this new feature removes invasive age verification checks on adult websites.

Enable it now in Settings → Bypass Age Verification.

[NextDNS @NextDNS]

Amplifying this important call for threat intelligence partners from @dns0eu.

Please spread the word if you can.

[dns0.eu @dns0eu]

Help us secure the 🇪🇺 European Internet.

If you are:
- a commercial threat intelligence provider
- a CERT
- a company or institution wanting to protect their users from phishing

And you can provide https://t.co/iY0qSH81MK with a list of malicious domains to be blocked.

[1/3]

[NextDNS @NextDNS]

So many of you have helped us translate NextDNS in many languages — we are immensively grateful for that.

If you can spare some time, please help us with translating our 🇪🇺 European non-profit initiative https://t.co/3hE0x9Df81.

[dns0.eu @dns0eu]

https://t.co/iY0qSH81MK is available in all 24 official languages of the 🇪🇺 European Union.

Please help us improve the translations in your language by upvoting the best translations and downvoting the incorrect ones, or suggesting new ones.

→ https://t.co/JHz0zar8pl

[dns0.eu @dns0eu]

Introducing https://t.co/QpbAP5Ude9 — our official and comprehensive documentation about:

1. Threat Intelligence Partners — and how (and why) to become one

2. Infrastructure Partners — and how to become one

[1/2]

[dns0.eu @dns0eu]

https://t.co/iY0qSH81MK aims to provide the highest level of protection against Internet threats to 🇪🇺 European citizens and organizations by blocking millions of malicious domains.

But if you want a completely unfiltered DNS, we've got that too.

https://t.co/1SorSilcco

[NextDNS @NextDNS]

We are so proud and excited to see https://t.co/3hE0x9Df81 come to life — a lot of tech and experience from NextDNS went into making this a reality.

Please spread the word to your 🇪🇺 European friends and colleagues!

[dns0.eu @dns0eu]

We are launching the first 100% 🇪🇺 European public DNS resolver!

Free, sovereign and operated by an independent non-profit organization based in France.

Thanks to @NextDNS, @bambenek, @BforeAi, @abuse_ch, @_ANEXIA, @gandibar who helped us launch!

[1/3]

https://t.co/J7vy23pvWe

[NextDNS @NextDNS]

At NextDNS, we ❤️ @Tailscale.

Today, we are so thrilled to announce that you can now set up NextDNS natively in your tailnet — you can even assign separate NextDNS profiles to specific nodes if you'd like.

Thanks @bradfitz and the team!

https://t.co/Tbyo8Rdyz2

[NextDNS @NextDNS]

You can now set up NextDNS natively with @TwingateHQ — one of the best zero trust solutions on the market.

Organizations and pro users can now combine the capabilities of both services on their network 🚀

Read more at https://t.co/Ap5XQRvnOu

[NextDNS @NextDNS]

Introducing Access — easily provide editing or viewing-only access to any of your profiles to others.

This is available today at the bottom of the Settings tab.

[NextDNS @NextDNS]

@pcguy8088 You probably enabled cloudflare DoH in Firefox which is overriding your DNS system setting for this browser.

[NextDNS @NextDNS]

@joes_world What would you like to see?

[NextDNS @NextDNS]

Introducing our new catch-all #security feature — automatically block all Dynamic DNS hostnames.

Widely used in #phishing campaigns, DDNS lets malicious actors quickly set up hostnames for free and without any validation or identity verification.