Keyboard
WASD or ↑ ↓ ← → move
Space / Shift EMP
E Overdrive
Esc / P Pause
DIRTYPHISH ORIGINAL // NETWORK DEFENCE
D-DOS DAY.
Every packet counts. Keep the network alive.
Know your controls.
Your ship fires automatically. Move to dodge. The small bright centre is your collision hitbox.
Touch and gamepad
Drag in the playfield to move. Tap EMP or OVR for abilities. On gamepad, use the left stick or D-pad, A for EMP, X for Overdrive and Start to pause.
Weapon and support drops
PL Pulse · SC Scatter · IL Ion Lance · SK Seeker · PC Plasma. Collect power cores to stack tiers, plus drones, shields, repairs, EMP, magnet and rapid-fire support.
What is a DDoS attack?
A distributed denial-of-service attack targets availability: whether people can use a website, application or network. D-Dos Day turns that pressure into an arcade battle. Its ships, weapons and EMP are fictional mechanics, not real mitigation tools.
DoS versus DDoS
Denial of service describes an attack that makes a resource unavailable. The distributed form uses multiple sources. An outage or sudden traffic spike is not automatically an attack: a popular event, software fault or supplier failure can also interrupt a service. Check request patterns, resource use and provider evidence before deciding the cause. [1]
Where botnets fit
A botnet is a collection of compromised devices controlled by an operator. Those devices can be coordinated to send hostile traffic. Not every DDoS source is an infected home computer: reflected traffic and other infrastructure can also contribute. The Botnet and Command & Control sectors borrow this theme, without reproducing real attack techniques. [2]
Three common DDoS categories
Volumetric attacks consume network capacity. Protocol or state-exhaustion attacks pressure connection handling or network equipment. Application-layer attacks target work such as generating web responses. Categories can overlap, and an expensive request may cause harm without a record-breaking traffic volume. Defence must cover the actual constrained resource. [1]
KEEP LEGITIMATE USERS MOVING
How does DDoS mitigation work?
Providers can absorb or filter traffic before it reaches a saturated connection. A CDN can reduce origin requests for cacheable content; a WAF and rate limits can restrict suspicious application traffic. Coverage, configuration and service design matter. Limits set too broadly can also reject legitimate users. [3]
Map critical dependencies, including DNS and hosting, and agree escalation contacts with suppliers. Monitor service health and rehearse a response, including which functions can safely degrade. Extra capacity helps some bottlenecks but cannot remove every limit. NCSC guidance explicitly warns that denial-of-service risk cannot be eliminated. [4]
During an incident, follow the authorised response plan, preserve useful logs and involve the provider that controls the affected link or service. Test changes carefully. The objective is restored access for real users, not simply a lower traffic counter.
Explore the related games.
NETWORK SERVICES
LAYERED DEFENCE
DEFENCE ARCADEDDoS and gameplay FAQ.
How do I play D-Dos Day?+
Press Play, choose a ship and launch Campaign or Endless Mode. Your ship fires automatically. Dodge attacks, collect weapon and support drops, use EMP to clear danger and activate Overdrive when charged. Campaign has 20 missions and five bosses.
Can I play on mobile and control the sound?+
Yes. Drag within the playfield and use the on-screen ability buttons. Settings contains separate sound and music switches plus graphics options. Keyboard and gamepad controls are also supported. Fullscreen depends on browser support.
Does a firewall stop every DDoS attack?+
No. Firewall rules can filter some traffic, but a device behind a saturated upstream link cannot recover that link's capacity by itself. Protection depends on the attack, provider coverage, architecture and configuration.
Does DDoS mean someone has stolen my data?+
Not by itself. DDoS describes disruption to availability, not proof of data theft. Investigate other suspicious activity as well, because an outage does not establish whether a separate compromise occurred.
Is every traffic spike a DDoS attack?+
No. Legitimate demand, application faults and infrastructure failures can look similar at first. Compare normal behaviour, errors, traffic patterns and supplier evidence before attributing an outage to an attack.
Does this game launch attacks or protect my device?+
No. D-Dos Day is a single-player arcade shooter with a cybersecurity theme. It does not generate attack traffic, inspect your network or provide DDoS protection. Its weapons and power-ups are fictional.
Is D-Dos Day similar to Galaxiga on Google Play and the App Store?+
If you enjoy mobile space shooters such as Galaxiga, the enemy waves, dodging, weapon pickups, ship upgrades and boss battles will feel familiar. D-Dos Day is a separate, single-player browser game with a DDoS defence theme, 20 campaign missions and Endless Mode. It is not Galaxiga, a port or an official version, and DirtyPhish is not affiliated with its publisher.
Does D-Dos Day resemble classic arcade shooters such as Galaga?+
Yes, it shares the broad space-shooter tradition of Namco's Galaxian (1979) and Galaga (1981), where a spacefighter battles enemy formations and dodges incoming fire. Those arcade classics used simpler sprite graphics and more restricted movement. D-Dos Day adds its own cybersecurity setting, modern effects, ship upgrades, varied weapons and boss encounters. It is not an official Galaga or Galaxian game.
Are my scores saved and can I share them?+
Progress, upgrades and personal bests save in this browser when storage is available. A result card shows your real run score and personal best. Share your score with a direct game link, or copy a caption for your own Instagram or TikTok post.
Sources and further reading
- Cloudflare: What is a DDoS attack?
- Cloudflare: What is a DDoS botnet?
- Cloudflare: DDoS prevention methods and tools
- UK NCSC: Preparing for denial-of-service attacks
Educational guidance checked 17 October 2026. Provider examples describe capabilities, not an endorsement or guarantee.