Network-level threat blocking

Block threats on iPhone, Mac, and Android — in every app, not just your browser

Casper's Cloak blocks threats at the network level, before they ever reach your device — across every app on iPhone, Mac, and Android. Same approach as Pi-hole and NextDNS, but pre-configured and managed. Pages load 30–60% faster; battery impact is under 2% per day.

Every app
Not just browsers
30–60%
Faster page loads
<2%
Daily battery impact
iOS · Mac · Android
One subscription

Why Casper's Cloak beats browser-only blockers

Browser-only blockers only see what your browser sees. Casper sees every connection your phone or computer makes — so threats in apps, smart-TVs, and on every device on your network all get blocked.

In-app protection, not just browser

Free games, news apps, Instagram, embedded webviews — anywhere an app talks to a known threat or tracking host, Casper blocks it. Browser-only blockers like AdGuard or 1Blocker can't do this.

30–60% faster page loads

Trackers aren't just visual clutter — they're heavy network calls. With threats blocked at the DNS layer, pages skip the tracking roundtrip entirely. Article-heavy news sites typically load in half the time.

Trackers blocked too

The same DNS filtering that blocks threat domains blocks tracking pixels, analytics beacons, and cross-app fingerprinting. iOS App Tracking Transparency only catches some; Casper catches the rest.

Under 2% daily battery impact

Filtering happens upstream on Casper's DNS resolver, not on your device. CPU overhead is essentially zero. Some users report battery actually improves because ad-heavy apps drain less.

Works for every device on your account

One Casper subscription protects all your devices: iPhone, iPad, Mac, Android, and (on the Family plan) anyone else in your household. No per-device licenses or browser extensions to install in each browser.

Updated blocklists daily

Ad networks rotate their hosts to evade blocking. Casper's blocklists update daily from a combination of well-maintained public sources (StevenBlack, OISD, AdGuard DNS) plus our own curated additions.

How DNS-level threat blocking actually works

The plain-English version, no networking degree required.

1

Every connection starts with a DNS lookup

When your phone wants to load an ad from "adservice.example.com", it first asks DNS: "what's the IP address for adservice.example.com?" Without that answer, the connection can't happen.

2

Casper is your phone's DNS resolver

When you install Casper, your iPhone / Mac / Android sends every DNS query to our resolver instead of your ISP's. We see the question before any connection is attempted.

3

We refuse to resolve threat and tracker domains

Casper checks the requested hostname against an updated blocklist of ~150,000 known threat/tracker domains. For hostnames on the list, we return "no such host" — and the connection never opens. The threat is invisible to your device.

4

Legitimate traffic flows normally

For any hostname NOT on the blocklist (news sites, banking apps, work tools, video calls), we resolve it the same way any DNS resolver would. There's no inspection of your actual traffic content — DNS only sees the destination.

Threat Shield FAQs

What technical users and skeptics ask first.

AdGuard and 1Blocker work as Safari content blockers — they only block threats in Safari. DuckDuckGo Privacy Browser blocks threats only inside its own browser. Casper's Cloak filters at the network (DNS) level via the system VPN, which means threats are blocked in every app: Chrome, Safari, Instagram, news apps, free games, embedded webviews, smart-TV streaming. Same approach as Pi-hole and NextDNS, but managed and pre-configured.

Stop threats before they reach your phone.

Free trial. iOS, Mac, and Android. Cancel anytime. No payment info required to start.