The device seems to have installed the PopcornTime
application This application connects to the domains
upd pct info popcorn time update xyz
popcorntime upd xyz and others using the non encrypted
HTTP protocol on port 80 TCP These connections leak the
application installed the operating system version OSX
10 15 4 and a user id among other information This
information can put the user at risk when sent unencrypted
We recommend uninstalling this application
Low
Insecure
Connections by
PopcornTime
Application
Low
The mobile device is communicating without encryption
plain HTTP with several websites These insecure
connections leak information about the user increasing the
security risk of the user The information leaked includes
but is not limited to operating system type name and
Information
version public IP address and some of the applications
Leaked
installed We recommend uninstalling all applications that
Via Insecure HTTP are not strictly necessary Use a VPN when using public
Requests
and not trusted networks
Low
The mobile phone communicates with the IP 52 77 231 85
on port 59835 UDP This connection seems to use the
STUN protocol which is used nowadays for video calls
This STUN connection is likely associated with Signal the
secure messaging application The connection is encrypted
however the STUN protocol leaks the public IP address of
the user in this case the VPN IP address of our University
Public IP addresses can be used to locate the approximate
STUN Connection geographical location where the mobile phone is connected
with Amazon
from We recommend using a VPN when in public
Server
networks or when the knowledge of the IP address needs
52 77 231 85
to be protected
Low
The application WeChat Music or the Music functionality of
the WeChat application communicates using HTTP without
encryption We identified more than 400 HTTP requests to
Not Encrypted
WeChat Music servers Each request leaks the device type
Communications and operating system version and the activities of the user
by
in the application streaming music which music etc
WeChat QQ Music While this is not a high risk behavior we recommend to
Application
uninstall this application
Low
The mobile phone communicates with Xiaomi servers using
the HTTP insecure protocol leaking device and personal
information in the network without encryption The
information leaked includes internet connection type
operating system and version and country code among
Information leaked others This cannot be avoided unless the user changes
to Xiaomi servers mobile devices