Privacy - r3.o.lencr.org - keeps connecting on iPhone 13 - how to stop these Malware infections?
I have my iOS 16.3.1 - Phone 13 set with the new security feature Lock Down enabled. From privacy checks, after restarting the device, it is automatically connecting to this website: http://r3.o.lencr.org/
I have read about this domain on Apple Support community, where a highly rated response said that it is a Malware.
Furthermore, Apple support advised that I should perform a Reset after consulting with them about this, which I duly performed. Yet, a few days later, I can see the reset iphone is still calling home to http://r3.o.lencr.org/, which is very concerning?
I live in Australia, and note that (sadly) our govt recently (in late 2021) passed in secrecy some very draconian secrecy laws aiming at VPN services:
I also read that letsencrypt org (lencr.org) uses the same website address as the r3.o.lencr.org! however, I am unable to see that particular website listed by letsencrypt? Furthermore, it seems bizarre that letsencrypt org could adopt exactly the same website address as a well known Malware targeting Windows and Mac users - why would they choose to choose a domain name the exact same as a known Malware?
I reached out to Apple a second time, and after blocking the http://r3.o.lencr.org/, and it’s https variant using Screen Time app (via Content and Privacy restrictions), I now find that Safari is broken. I now can not create a Private Tab…only have the option for non private tabs now. I am wondering if I am targeted for this new draconian surveillance laws, which is now sadly permitted for use Australia. I do use a VPN (Mullvad) and can see that accrues an enormous amount of apps (360) contacting this domain in Privacy Reports in short periods of time. Sadly, I may be under surveillance possibly because of my political viewpoints (opposing US hegemony), and figure this might’ve why I am being targeted.
Sadly, Australia now has the most draconian internet laws in the so called “free world.”
Feeling quite privacy compromised on a platform that emphasizes it’s privacy credentials : (
Hoping someone knows how to block the http://r3.o.lencr.org/ and it’s https variant - without breaking Safari - as outlined above??
Thanks L
iPhone 13, 16