NEWS Isn't a legal site opened? It’s the fault of “protection.” How operators filter traffic and where the line between security and censorship

pinkman

BOSS
Staff member
ADMIN
LEGEND
ULTIMATE
SUPREME
MEMBER
BFD Legacy
Joined
Feb 3, 2025
Messages
2,253
Reaction score
19,078
Deposit
0$
DNS filtering does not require application installation, but can mistakenly block legal sites.
1777317724376.png
The services of protection against phishing from telecom operators again caused disputes after the complaints of T-Mobile subscribers about the connection of “Security protection” without a separate consent. Other major operators have similar solutions: Rostelecom has launched its own service for protecting against dangerous sites, and MTS offers an Internet defender based on Kaspersky Lab.

The meaning of such services is reduced to checking Internet traffic on the operator's side. The user does not need to install the application or change the phone settings: the filter works on the communication network and works until the site is loading on the smartphone.

In a simple version, DNS-filtration is used. When a person opens the page, the device first requests the address of the site from the DNS server. If the resource got into the database of dangerous domains, the operator instead of the page shows a warning or plug. Such lists usually include phishing copies of banks, marketplaces, payment services, “Public services”, pages with malware, fake draws and investment schemes.

Rostelecom launched his service on December 1, 2025. According to the data provided by AndroidInsider.ru, the operator’s base contains more than 50 000 records and is updated automatically every day, and the number of blocked attempts to switch to phishing resources has reached 400 000. MTS has a similar task solved by the Internet Defender. The discussion caused the connection of “Wettings protection” without a separate consent of subscribers.

The main dispute is not related to the idea of blocking phishing, but with opaque connection and possible filtering errors. The service can indeed reduce the risk of switching to an already known fraudulent site, but an automatically updated base sometimes blocks legal resources. As a result, the user may not open a regular site, and there is often no clear way to quickly challenge the blocking.

A separate question is caused by DPI, the technology of in-depth traffic analysis, which, according to AndroidInsider.ru, is being tested by Beeline. The DNS filter checks the site address by the database, and DPI allows you to recognize the categories of traffic more broadly: VPN services, messengers, online games, social networks and other types of connections. Therefore, the service, declared as protection against scammers, some users perceive as a tool for wider access control.

The shutdown depends on the operator. In T-Mobile, the service can be searched in the application or personal account in the section "Services" or "My services". In Rostelecom, management is located in the personal account, in the section with services. In MTS, the Internet Defender is disconnected through the My MTS application. If the desired item is not displayed, the subscriber will have to contact in support of the operator.

Traffic filtering on the operator’s side does not replace basic digital security. The service catches only threats that have already fallen into the database, but does not protect against new phishing pages, malicious applications, fake files and links from SMS or messengers. Check the address bar, different passwords for different services, caution with APK files and built-in browser protection are still more important than any automatically connected service.
 
Top Bottom