EcoVPN Help Centre
Threat Protection Layers

Threat Protection Layers

EcoVPN uses embedded DNS filtering to block known trackers, adware domains, and hostile endpoints. Threat protection is referral-controlled and operates invisibly within the encrypted tunnel.

What Gets Filtered?

  • Ad networks and telemetry domains (e.g. DoubleClick, Facebook Pixel)
  • Known malware distributors and exploit kit providers
  • Phishing domains flagged by industry threat feeds
  • Tracking CDN routes used for fingerprinting

Filter Logic

  • DNS queries are rerouted internally via EcoVPN’s resolver fabric
  • Blocked domains resolve to 0.0.0.0 or custom suppression endpoint
  • No third-party DNS resolution - no leak risk from external lookups
  • Filters update hourly via encrypted domain push

Managing Your Filter Tier

  • Tier 1 users get default community blocklists
  • Tier 2 & 3 sponsors can toggle filters, request additions, or submit suppressions
  • To customise, go to Threat Settings in your referral dashboard

How to Verify Blocking

  • Visit a known blocked domain (e.g. ads.google.com) and verify failed load
  • Run dig or nslookup and check suppression IP returned
  • Use tools like dnscheck.tools to validate resolver behaviour

“EcoVPN blocks dangerous websites before they reach you, no antivirus needed.”

Didn't find an answer?

Our team is just a ticket away and ready to answer your questions