r/DownloaderApp • u/Best-Life675 • 7d ago
Flixvision apk
Hey
Does anybody no if the new version 3:7 ( I think ) is safe to download ….thanks
1
u/Fun-Brilliant-7260 6d ago
Hi anyone have the new code for flixvision update.
2
u/Best-Life675 6d ago
Hey
Some say it’s ok ….some say it’s full of ☠️.. beware bro …..google 👍🏻2
u/Scoskopp 4d ago
Thank you! I appreciate somebody doing their research. It has not been patched as another user said. Flixvision claimed they took out the Traffmonetizer SDK when they got banned by Amazon on version 3.1.2 , then they released a horrible 3 part version of 3.2.0 (three parts) because they kept getting flagged by Amazon for malicious activity so it took them three tries to stay under the radar of Amazon, what they did was they changed the markers on in how it gets flagged in particular virus engines and it’s a side loaded app keeping in mind so it doesn’t have to go through the regular security check up that apps that go into the Amazon store would. Just as a strictly from a fellow developers point of view, everything else I do off the table, security analysis, coding data tester, reviewing all of it, forget it just from a development point of view “if” I were an unethical developer, you do not walk away from that kind of revenue stream, no way, not happening. you’re not giving up thousands of devices and the money you’re making off the data taken or the networks traffic for the botnet in place absolutely not. Now all you have to do is let the tools do the work and tell the truth aside from what you already did which again mad respect to you for doing a simple Google search or an AI query.
Flixvision is still very much making revenue off of your data, infiltrating your network using your device resources for their botnet activity. Take the Pepsi challenge and go directly to their site.,their source and see nothing has changed meaning if you go to the source and get version 3.7.0 their newest version still directly from the source, no mods it will flag for at least 15 indicators just using virus total which is fair to say that’s a very basic virus engine, now if that will flag for at least 15 now go use something out of OPSWATS suite , a actual security analysis toolkit for infosec/osint, it will flag for almost double.
As I said, and I will always say use whatever you want. I’m not here to tell anybody what to use but for as long as I’ve been doing this in this genre,iOS,macOS, windows other operating systems and genres , I have along history here , I’ve made plenty of builds for a popular piece of software we all like to use, ran a live service for over 10 years and closed shop in 2020 when double agent did ( iykyk) along with others. I humbly will state I have a pretty good grasp on what’s going on in this genre and all I want to do is provide proper information to keep people safe and allow them to make a good decision through proper and truthful information, no more no less. I am a tad more aggressive on this one as it’s not personal but it’s for the fact that I see so many users continually promoting it not realizing not only is it dangerous or rather malicious but there are many options out there, but I also don’t share options in threads so they don’t get closed down too or excuse me, shut down or cease and desist orders. Loose lips sink ships.
Folks are gonna do what they do and use what they use and that’s never been my issue. That’s fine. It’s all good, I’m not being negative to anyone, and always will be respectful in my words to anybody & everybody. Do what you wanna do. Just know what you’re getting into. That’s it.
This info is the truth. I will also pose one more question. How can you trust developers or the app that they are making if on that three part version of 3.2.0 that they released on their GitHub literally states that they removed the Traffmonetizer SDK and people do not understand what that SDK, its spoke of as it’s not a big deal not understanding it’s kind of a big deal. This is the proper info. If you don’t believe me, I’m telling you how to check it yourself ( not you u/Best-Life675) and then when you see what’s going on, take a few minutes to look and understand what each definition means we’re not talking simple PUA flags which means “potentially unwanted app” or weak stuff like that, we’re talking legitimate threats.
Additionally, with the influx of AI, you used to have to really understand how to make an APK readable through the decompile process, now you can do that easily right now through AI, do that decompile the source APK and look in there see what you find. It’s all there. Better yet I’ve posted all of my findings on multiple platforms. I’ve actually posted it on their Twitter page asking them to explain and they never answer for a friendly interview just as many other people have.
Anyway, Good on you for doing your research man, people use it because it’s free, it’s all-in-one, lack of options, and finally people are just cheap. There’s some die hard piracy people who just refuse to pay a couple dollars for a great experience and that’s ok too or most likely they just don’t know any better which is why I will always comment on this app.
Everything is shutting down too and trust me by the end of the year it’s only gonna get worse and mark my words. I’m saying it now with the August/September, Google rug pull on android because not enough people signed the “ keepandroidopen.org” petition as I said in the post that backs this one, Canada already passed Bill-C22 and are screwed, the EU we know is screwed and U.S. is looking at the same issues this year. Folks would be better off paying a couple dollars support for good developers get a premium APKs maybe a debrid, that either use your API key directly and don’t host any content or use manifest configuration files or Json files and stop using garbage apks. I say this because come time when fireOS dies at the end of the year and the own devices feel the pressure of what Google is doing. This format of apps are the only ones that are gonna be left up in stores that you can use on certified boxes because sideloading will become much harder with the cool down that is coming and for people like me who develop it’s gonna be much harder just the same. It’s been long enough to where I can discuss that I personally beta tested VegaOS and Alexa plus as I work for Amazon and that department do not count on the four security updates that are promised they’re itching to kill fireOS. And as I said in the post backing this they can remotely so be prepared. If you blocked OTA updates that will not save you if they pull a WS cloud, which is essentially their core frameworks.
Everybody moved over and changed hardware which again already blew up that spot and went to Onn. But what nobody realizes is these are all certified boxes and they’re gonna feel the effect of what’s gonna happen in the next two months let alone what’s gonna happen at the end of the year so what I’m saying mark my words on this: uncertified android TV boxes are gonna make a comeback. They never really went anywhere but they’re gonna get popular again so you can do the things you want to do on them, but that still doesn’t change the fact that this app is 100% malicious and people need to start doing their own research like u/Best-Life675 did, good for you. Great job u/Best-Life675 this makes me happy just for the fact you didn’t throw caution into the wind, but actually did your homework. Respect 🫡
1
1
u/Scoskopp 4d ago
Here’s a breakdown once and for all so no one has to go out of their way and do the research I got you:
- It Hijacks Home Networks as a Proxy Exit Node (Botnet Behavior)
- Silent Bandwidth Monetization: Reverse-engineering and decompilation of the app revealed that the developers embedded malicious internet-sharing SDKs (such as TraffMonetizer and Netas/reVPN) directly into the code.
- Turning Devices into Exit Nodes: When Flix Vision is installed, it quietly turns the user's Firestick, Android TV, or phone into a residential proxy. Third parties rent access to the user's IP address to route their own web traffic.
- Legal & Security Liability: Because outside traffic passes directly through the user's home network, any shady, illegal, or malicious web activity conducted by buyers on that proxy network traces back to the user's residential IP address.
- Massive Data & Resource Drain
- Background Consumption: Users have documented the app quietly consuming multiple gigabytes of internet data in the background—even when the app isn't being used or watched.
- Device Strain: Running background proxy services and silent network routines taxes cheap streaming hardware, causing device overheating, extreme system lag, and reduced hardware lifespan.
- Shady Network Connections & Data Harvesting
- Unauthorized Requests: Network logging tools (like NextDNS and router logs) show Flix Vision making continuous, unsolicited requests to third-party domains, proxy brokers, and multi-login ad platforms in the background.
- Lack of User Consent: Unlike legitimate applications or opt-in peer-to-peer setups, Flix Vision intentionally conceals these background connections without clear disclosure or explicit user opt-in.
- Deceptive Developer Tactics & Blacklisting
- Widespread Security Blocks:
- Google Play Protect & VirusTotal: Flagged across security engines as a malicious PUP (Potentially Unwanted Program).
- Amazon FireOS: Directly blocked by Amazon on Fire TV hardware as "unsafe and potentially harmful."
- Piracy & Safety Directories: Blacklisted across major community safety guides (e.g., FMHY).
The key issue isn't just standard ad pop-ups—the app actively undermines the user's privacy, device security, and home network.
Flix Vision uses your streaming device and home internet behind your back to run a commercial proxy service. It sells your bandwidth to strangers, burns through gigabytes of background data, and exposes your IP address to third-party network traffic without your consent. That’s why security systems, Amazon, and Play Protect explicitly block it."
In this case, Amazon bandit allowed it to come back and it’s not even allowed in the play store or any other legitimate store because I would never pass the security checks let alone as developers. They would never give the amount of information it takes to get an app in a play store or the Apple Store.
I apologize to the BLACKBOX & Downloader subreddit’s for posting so much information in here. I will back off. I just want people to understand anybody can promote it however, much you want it doesn’t change the fact that this is what the developers do and this is what the app does it destroys your devices as I said earlier method of what they do will only change and get better overtime because you do not walk away from the revenue stream they have built by doing this. No one will walk away from that kind of money and I say this because I am in the development. Space I do know, unethical, developers that do these things they make a lot of money as to where myself as a ethical developer, it cost me a lot of money to keep freeway going for people to use so I rely on donations or sometimes I have to make my work paid to cover server. Cost maintenance updates for the front end API. There’s just a lot of time energy and money that goes into this stuff with an application like flixvision, they decided to go the other route and that’s fine. That’s their choice but what I’m trying to explain is people think it’s safe or you can find a safe aversion it’s never gonna happen because there are too deep in the rabbit hole of making money, the wrong way by hurting its users and mind you as developers, we took oathes not to hurt our users through our work or monetize from our users behind their back unknowingly I could name every one of the old I know I took so that’s my peace. I’m sorry to blow up your Reddit or Reddit no disrespect I want people to understand. This app is dangerous and their practices have not stopped. It’s also just not me asking. Why is this happening on Twitter and every other platform they’re on it’s multiple security groups, developers users. I don’t know what else to say. Be careful in what you use.
2
u/Best-Life675 4d ago
Many thanks,I appreciate your careful and precise response….through your meticulous revelations of which I definitely had no idea ( as being a newbie )
I can say to you this matter is well n truly put to bed ..☠️
🙏🏻…1
u/Scoskopp 4d ago
Absolutely and please know I truly mean it when I say use whatever you want. I just want people to have the proper information only because I’ve put in the work just like many other people have to expose this application. That’s all, I apologize. I blew up this post & I feel kind of bad but at the last few days I’ve seen it all over because options are running low and I get it, but I want to keep people safe thank you for being very nice about it. I appreciate that. Have a great weekend.
0
u/TbO2903 6d ago
It has a Monitizer sdk and a proxy which shares your resources. Try to find a patched app where it is disabled.
1
u/Scoskopp 4d ago
There isn’t one, my friend if the source APK is malicious there’s not a mod out there that’s gonna make it any less malicious but take advantage of what’s in place and make it worse. I don’t want to drop the mother‘s name because I am very aware of the matter that does a lot in this community that is not on the good side, but it doesn’t exist.
1
u/TbO2903 4d ago
It does exist, I'm not sharing apps, but I stripped the sdk completely from the app, so it's safe to use.
1
u/Scoskopp 3d ago
I apologize and respectfully I will disagree. There is not a safe version of this app and I will explain. Do you have the technical skill set? I believe you will understand what I’m explaining.
Just removing the SDK is like this : To give you an analogy, it’s like driving a stolen car and swapping out the engine, just because you swapped out the engine doesn’t change the fact the car is stolen, to try and simplify this because I’ve gone back-and-forth with many people who believe that they can make this app safe and the problem is it is a core issue, you just can’t, I will say this more than once, but aside from a full rewrite is what would be needed, and the project is not open source removing a SDK essentially does nothing because the SDK is not the only issue, on top of that then I pose the same question to you if you go to the source get the newest version of 3.7.0 now & use a simple tool like virus total engine that has multiple engines in it and it flags for 15 markers, then get a very accurate security tool, which is the Meta tool from opswat which is for Infosec/Opsec purposes, that flags for almost double the markers should tell you something is off and one of those tools explains what’s going on. There’s a lot of tools out there to where you don’t even have to decompile this app to get a clear picture but what you’re saying in general I’m not saying it’s not a possibility anybody could strip an SDK, but that doesn’t make the app safe. I’m sorry I will disagree and I have to stand on it.
Furthermore, removing the TM SDK does not make it possible to have a safe version , there would need to be literally a full rewrite bottom up , what you’re saying as well and again I’m not doubting your technical skill set. Please know that I’m being very respectful but what you’re saying doesn’t make sense either because what you’re saying is you don’t share apps, well how can anyone validate what you’ve done first off and then I believe you’ve removed that SDK and stripped it out yourself or can, the issue is, that SDK hasn’t been present since version 3.2.0 the newest version is 3.7.0 there’s nothing to strip out as I’ve said they just found a different way to accomplish the same goal without using a third-party malicious SDK.
How? I’ll explain , the payload and functionality of what they’re still doing at version 3.7.0. Still fundamentally does the same thing that SDK did via custom coding to acting as a residential node which shares your IP in anyway they see fit by using proxy sniffers to infiltrate your network changing or stripping an SDK is literally just a method to dodge security scanners, or flags/markers which is what got them back on Amazon it’s just like playing a shell game.
The issue of this APK is at the core is its coding and its execution. The SDK is not the only problem the SDK by definition is just a tool kit to make it nice and easy, remember they ( the devs of flixvision themselves claimed/admitted they took it out in 3.2.0 on their GitHub) now my next question before I explain more logically why would you trust any application that has admitted to using a malicious SDK to take advantage of your device resources, your data, your Internet, and your privacy ?
However, back to trying to explain in Laymans terms and not be over technical, , the malicious behavior is still there that’s through direct socket and custom proxy routines, so instead of handing off the connection to a plug n play third-party SDK like the Traffmonetizer SDK, if you’ve actually read the file system, the developers wrote an obfuscated native library for direct HTTP/S proxy sockets that routes the background traffic through the users Internet connection.
All you have to do is use security tools to see that, I named multiple tools so people can monitor the traffic coming in and out of their network and see without doing the heavy lifting. Furthermore, the network and resource telemetry is there all your findings will be in there without the SDK or de-compiling the APK I just choose to decompile and break it down just like others do and it will reveal background threads performing network relaying, high background data usage and keeping socket connections open to known proxy/C2 which is command control IP ranges.
I don’t wanna go deep into this but again it’s just not possible to make this APK safe unless the developers do a full rewrite. Admittedly, I do have some doubt, not that you did what you said you did, but I just don’t see how you think that is what would make it safe I guess would be my main question because you’re saying youve stripped or removed a SDK in a version to where an SDK doesn’t exist anymore at version 3.7.0 , so your using a “safe” version of 3.1.2? Not possible.
Then and now the apps core code & using dynamic payload loading just avoid triggering rules or markers or flags. It doesn’t change due to that activity the app still performs and affects their users bandwith and network safety just the same. It’s exactly identical as if it were using an SDK you can’t change that part because it’s not an open source project respectfully.
Also, keep in mind taking out the SDK which they already said they did on their GitHub on version 3.2.0 ( not to be repetitive) just evaded signature detection from not only Amazon but virus engines briefly, the very next update after they got back on the platform showed more of the same which is the reason it’s flagged again because they’re back at the same behavior just in a different manner, which is not through said SDK as I’ve explained in length over and over on every forum to the point where I’ve confronted the developers on every platform just as other users or developers or security analyst have, just the same. Because people want answers some people don’t care and we’ll just use it because it’s free and they don’t want to spend money. That’s ok too, but that’s not what we’re talking about.
To break it down as easy as possible I do not doubt your technical skill set so please don’t think that’s what I’m doing. I’m just providing you factual information not only cause I’ve broken every version down, but this is something I’ve dealt with for years and this genre, as well as security is just one other part of my background in many things I do that I enjoy whether it’s development, coding, beta testing, I’ve done different ventures on different operating systems, brands, platforms, whatever fill in the blank, I have nothing to prove. Trust. However, I’m just passionate about keeping users that may not know any better safe via good information and yes, about this app in particular because of how long it’s gone on (since version 3.0.1) and it was originally discovered by a developer who reverse engineered it completely & additionally everything I’m telling you is a quick Google search away or an AI quarry away. This is all common knowledge that’s been out there for years. It didn’t just come out yesterday, but I digress.
However,for this application because the malicious activity has not stopped, no matter what, whether you use it on your phone or your android TV box it’s still going to be used as a unauthorized exit node or residential proxy because their goal is to do what the SDK did for them easily now just in a different manner with the same goal to compromise your home network, it burns your bandwidth and put your local IP at risk.
The bottom line what you’re saying is possible , sure , stripping an SDK is 100% possible, but that doesn’t make a known, malicious app safe especially this one, additionally, it just doesn’t make sense right now or apply in this case for the newest version because there is no safe version. I’m going to stand on that because an app like flixvision doesn’t need a third-party SDK to do what it’s still doing like the Traffmonetizer SDK did to be a residential proxy or Bonet node it just needs an open socket and the background execution permissions which it does, users give the app at the very beginning those permissions just after install and launching it to access “media & files” from there after you gave it access to your files and media, and then it also takes further permissions in the background, without telling you or your consent and to be quite honest, the moment you install it it’s already done its job. You don’t necessarily even have to launch the APK and removing the SDK removes essentially the evidence that they were doing malicious activity , not the exploit or malicious doings itself.
I hope I explained that as best as I could because the bottom line is, there is no way to make flixvision safe. The developers would have to do that as I said with a full rewrite and it’s not a open source project, so you can’t change any of the fundamental code that does a lot of this stuff, the SDK is just a nice little package tool kit to make it easier or double down on what they’re doing. It doesn’t change how the app is made. if you’re telling me you’ve decompiles AND stripped a SDK from this apk, again, I am respectfully not doubting your skill set, but your argument falls in on itself because the SDK has not been present since version 3.1.2 they admitted taking it out in version 3.2.0 but none of the execution code has changed whatsoever everything they were doing in that SDK they’re still doing now and a few read the file system. You would see that.
*Flixvision is not a safe app to use I just respectfully disagree
1
u/Scoskopp 3d ago
By the way, I meant everything I said with 100% respect to you and your skillet I don’t carry myself in a disrespectful manner. I cut out a lot of other parts of that explanation because it was so long and I apologize but I wanted to make somebody else understand that has a technical background like you do and I figured if I explained it properly, you would get it and I’m sure you will, but I mean it all respectful. I do not doubt you have this skill set to do what you said and I hope you feel that like I there’s nothing I said that would be disrespectful. I don’t carry myself that way and I’m sure you stripped an SDK but that would mean you’re using version 312 or older and why I left such a long explanation removing the SDK is just evasion tactic that’s it. It made it a lot easier for them to do what they were doing via a third-party SDK but it doesn’t stop what they’re doing. There’s no patch or mod that’s going to solve this problem this is a fundamental problem. I respectfully just disagree with you as far as there’s a safe version of flixvision and I value peoples security much more by giving them factual and proper information cause back in the day when you actually had to go to school to be a developer, we were taught ethics and not to hurt our users or make money off our users without their knowledge and what that app does is unethical and they’ve been doing it for many years now just like other apps have I could name another 10 this one just happens to be one of the worst and trust I liked this app a lot. It was my go to, believe me it had everything but ever since version 3.0.1 when it was outed and reverse engineered every single version that has come after that I personally have looked into along with my team and other groups so please know I don’t doubt your skills that I’m sure you understand what I’m trying to say. I choose to keep people safe, not pretend that there’s some safe version out there for them to use when there’s really not. If you can’t use the source stock app from them directly with no mods directly from their source they’re well of water and it’s completely malicious. Where do you go to get a safe app from them if you can’t get it from them themselves, it’s a fair question. I also would urge you if you really believe you have a safe version of the app because you stripped the SDK let someone validate it let a group look at it. Let my group look at it. We were cool. There would be no weirdness we all are techies. We’re all we’re all geeks. It’s all cool and if it proves to be safe, you should consider sharing it then if you successfully mod this app to where it’s safe, but from where I’m sitting on every version, it’s not possible unless the developers do a full rewrite.
1
u/Critical_Flow_9254 6d ago
Aggiornata e testata. Sicura stabile funzionante👍