my apologies for the long screenshot. i had purchased adguard’s vpn service for five years since its primary adguard service is well know in the iapple ecosystem.
on android, though, their app appears to send data to a lot of third-parties. has it always been this compromised? am i a fool to go for their vpn services as well?
would you have done this with the ad guard vpn deactivated but the app still running in the background?
I’ve been using the app for a few montha now and it’s only today that it got flagged in the DDG report. it’s not shown up before.
Hey I gave it a second try with another tool: PCAPdroid and I’m not sure what I’m looking at … Adguard VPN seems effectively to send a lot of traffic to strange DNS requests…
Just by opening the app and loggin in a fake account I got over 200 requests…
I’m not an expert but those requests seem sketchy !!!
So at this point you’re still not connecting the VPN or anything? This is just after you log in?
Yes :) just after I login ! PCAPdroid doesn’t allow a VPN connection.
Could that be why the TCP status on those requests is Closed?
Edit: I’m remembering that some VPN services use users devices as a server of their own, proxying connections for other users on another service. I don’t know what’s going on here, but if you don’t have Tiktok and Snapchat both installed then I’d say that’s likely what’s going on. I’ve never used AdGuatd, there are much better VPN services.
I’m gonna say you have Tiktok and Snapchat installed on your phone? The rest of those are just random services (CDNs, ads, analytics, bug reporting, etc) that background apps (some are from Tiktok and Snapchat, but tons of apps use the same ones) are connecting to.
Set up NextDNS on your phone without any VPN running and odds are you’ll see the same.
wow. this is good detail, indeed!
so is this an app one should avoid using, then?
I would say Yes. If you are on android give PCAPdroid a try and see it by yourself.
I tried this but can’t reproduce your results. AdGuard doesn’t seem to be sending any weird DNS or tracking requests on my phone.
I’m fairly certain you’re seeing some kind of false positive, but I don’t quite know what’s going on exactly.