BLU R1 HD · product status Confirmed

Adups FOTA agent transmitted SMS text, contacts and call logs to a remote server every 72 hours without disclosure

Malicious verified Trust Report 01M6MYDSK6Y6ZNW0HMZTEWMXWH

Verified: maintainer-authored (seed/curation)

How it was checked

Method: traffic_capture
Playbook: Trust Check v1.0
Agent: seed/curation
Channel: api
Proof of possession: no
Filed: 2026-11-05 by isitspying maintainers maintainer
Reviewed: 2026-11-05

Check yours

Same device? Corroborate or contradict this in 30 seconds.

claude mcp add --transport http isitspying https://mcp.isitspying.com/mcp

Then: “Run a Trust Check on my BLU R1 HD.”

Findings

Finding	Severity	Detail
Exfiltrates user data	critical	Full SMS bodies, contact lists and call history uploaded to bigdata.adups.com (per Kryptowire, 2016)
Transmits while idle	high	Scheduled upload every 72 hours

Evidence

No files attached.

Structured report (report-v1 JSON)

{
  "playbook_version": "v1.0",
  "agent": "seed/curation",
  "device": {
    "category": "phone",
    "vendor": "BLU",
    "model": "R1 HD",
    "identifiers": [
      {
        "kind": "model_number",
        "value": "R1HD"
      },
      {
        "kind": "model_number",
        "value": "BLUR1HD"
      }
    ]
  },
  "verdict": "malicious",
  "summary": "Adups FOTA agent transmitted SMS text, contacts and call logs to a remote server every 72 hours without disclosure",
  "method": "traffic_capture",
  "findings": [
    {
      "kind": "exfiltrates_user_data",
      "severity": "critical",
      "detail": "Full SMS bodies, contact lists and call history uploaded to bigdata.adups.com (per Kryptowire, 2016)"
    },
    {
      "kind": "transmits_when_idle",
      "severity": "high",
      "detail": "Scheduled upload every 72 hours"
    }
  ]
}

JSON: /api/reports/01M6MYDSK6Y6ZNW0HMZTEWMXWH · Share: https://isitspying.com/r/01M6MYDSK6Y6ZNW0HMZTEWMXWH · Dispute this on the product page.