I don't have the deejay-dota on my Astro that was mentioned in other thread, but I took at tcpdump out of my Wifi AP.
We have at least three system updaters in the system.
Under "About phone" we have Planet's updater. It talks to pulsar.planetcom.co.uk.443 (and fails with a cert error). You can go with a browser to
https://pulsar.planetcom.co.uk yourself and get a text "Cosmo Communicator Update Site ". Maybe this is spillover from Cosmo/ CoDi updater?
Then, next to that, we have "System update". It talks to Digitime, app-fota.digitimetech.com. This reminds me of the problem with Cosmo.
https://wuffs.org/blog/digitime-tech-fota-backdoors - not sure if I should be concerned.
Finally, under "system" we have yet another updater, that talks to android.googleapis.com and seems to have Google's look & feel to it.
I contacted Planet, let's see if they respond in any way about what's going on here..
