This is about the Chinese version of Tiktok, Douyin. It's basically the same but exclusive to Mainland China. To summarize:
- It immidiately attempts to access the clipboard contents after opening
- It makes 140 DNS requests to atleast 5 different domains in the first three minutes after closing the app
- it makes an additional 50 DNS requests 5 minutes after closing the app
- it continuously makes tracking requests in the background after being closed
- It requests phone and location permissions immidiately after opening
Some of the domains it contacts after being closed:
- pstatp.com
- zijieapi.com
- bytecdn.cn
- snssdk.com
- amemv.com
- douyincdn.com
This is honestly even crazier than I expected. I've never seen an app contact this many subdomains even while being in the foreground. Instagram contacts around 5 for comparison, and only while running in the foreground.
- It immidiately attempts to access the clipboard contents after opening
- It makes 140 DNS requests to atleast 5 different domains in the first three minutes after closing the app
- it makes an additional 50 DNS requests 5 minutes after closing the app
- it continuously makes tracking requests in the background after being closed
- It requests phone and location permissions immidiately after opening
Some of the domains it contacts after being closed:
- pstatp.com - zijieapi.com - bytecdn.cn - snssdk.com - amemv.com - douyincdn.com
This is honestly even crazier than I expected. I've never seen an app contact this many subdomains even while being in the foreground. Instagram contacts around 5 for comparison, and only while running in the foreground.