R3.o.lencr.org

Some apps are contacting this, is it harmful and how can I remove it.

iPhone SE

Posted on Jan 3, 2022 4:38 AM

Reply
Question marked as Top-ranking reply

Posted on Jan 4, 2022 7:41 AM

It is a Windows browser hijacking site that inserts ads into webpages, so it is a form of annoying (but not dangerous) malware. As your iPhone doesn’t run Windows it shouldn’t be a problem for you, but you should not go to any websites or use any apps that link to it because they are probably untrustworthy in other areas.


If apps from the app store are contacting it you should report it to Apple. If you are running apps that you didn’t get from the app store you are at risk for other reasons, and you should stop using them and remove the enterprise profile that they need.

5 replies
Question marked as Top-ranking reply

Jan 4, 2022 7:41 AM in response to NellaKay5

It is a Windows browser hijacking site that inserts ads into webpages, so it is a form of annoying (but not dangerous) malware. As your iPhone doesn’t run Windows it shouldn’t be a problem for you, but you should not go to any websites or use any apps that link to it because they are probably untrustworthy in other areas.


If apps from the app store are contacting it you should report it to Apple. If you are running apps that you didn’t get from the app store you are at risk for other reasons, and you should stop using them and remove the enterprise profile that they need.

Jan 22, 2022 3:31 PM in response to NellaKay5

Hello;

you shouldn’t believe everything on the first few hits on Google search.


This domain is owned and operated by Let’s Encrypt. It was flagged up to security teams at places like IBM before (probably due to the massive amounts of chatter about it that you found, or perhaps there is an actual Windows virus by the same name) but the domain itself was recategorised by them 3 minutes later as IT Security not malware.


the domain appears safe. Though I can’t tell you what it is for.

Jan 4, 2022 7:34 AM in response to NellaKay5

Hi NellaKay5,


Welcome to Apple Support Communities. We understand that you have questions about something on your iPhone. We'd like to help.


Can you tell us more about what is happening? Where are you seeing that link on your iPhone? Which iOS are you currently running on your device? Keeping it up to date can ensure that it's working as expected so that's always a good first step to check. You can find the exact version you're running in Settings > General > About.


Let us know and we'll go from there.


Take care!

Jan 4, 2022 8:37 AM in response to ColleenD1

I‘m running the current version of ios 15.2 on my iphone se first generation. The data protection report shows that 5 apps I dowmloaded from the apple app store contact the domain in question. It includes the mail app from apple and two other apps with sensible information. The internet search revealed that its some hijacking site. So how can I get rid of this or disable the apps from contacting this domain. Thanks!

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

R3.o.lencr.org

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.