## 26. Mobile Security Audit Supplement: Android / iOS 2.5 Series

Testing and reporting: VPNTestor test team. Test date: 2026-09-11. This report consolidates Android / iOS 2.5 series sample verification, runtime records and real-device connection and recovery tests.

Conclusions apply to the listed samples, checks and test conditions. Historical scores retain their original scope.

### 26.1 Android 2.5 Series

The specific sample is Android 2.5.8, build 5066. The installation file was obtained from the official distribution channel on 2026-09-11 and is 60,353,364 bytes in size. File integrity, the version embedded in the package, and the release signature have been verified successfully.

Sample SHA-256: `3d60e21b610bc12988992e055f45eceaf4d4cab46204de60dbb3d65869f20659`.

A partial static review of the installation sample has been completed. No hard-coded private keys or tokens were found among the common credential patterns examined, and no known vulnerabilities were found in the limited set of identifiable dependencies queried. This review does not cover every dependency or all runtime behavior.

The VPNTestor test team's Android runtime records include one public video and eight screenshots covering connection status, service access, speed-testing processes, node selection, device management, support, rule settings and desktop widgets.

[View the Android 2.5 series runtime demonstration](https://www.youtube.com/shorts/5YL1pBnKcvs). The public title of this video identifies version 2.5.6, and it is retained as series-level runtime material; the precise identity of the 2.5.8 sample is governed by the installation-file record in this section. No verifiable binding has been established between the screenshots or video and that installation file.

### 26.2 iOS 2.5 Series

The official distribution channel, App Store information, and application metadata from a connected device have been verified. The sample that can be verified in this review is App Store version 2.5.1, build 18; its App Store ID is 6759948234. This document uses iOS 2.5 Series as the product-scope name while retaining the precise version in the sample record.

This section records distribution and installed-version identity. iOS runtime and device-test results appear in Sections 27 and 28.

### 26.3 Evidence Scope and Public Materials

Runtime interfaces, service-access records, and speed-testing materials can support observations about visible functionality and operating state at the time, but they cannot by themselves prove protection against privacy leaks, protection during abnormal connection conditions, a no-logs policy, or the absence of security vulnerabilities. Historical conclusions in the existing annual report remain limited to the scope of their respective versions.

Accounts, device identifiers, subscriptions, traffic information and internal technical details in original screenshots remain in the restricted archive. This revision signs the six-language consolidated report and screenshot checksum lists, verifying file integrity and the publishing key.

[Download this public supplement](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v3-en.md). [Download the six-language file checksum manifest](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v3.sha256). The checksum manifest is provided for file-integrity verification.

### 26.4 Added-Record Timeline

- 2026-09-11: Completed identity, integrity, and signature verification for the Android 2.5.8 installation file and recorded the scope of the partial static review.
- 2026-09-11: Reviewed the public Android 2.5 series runtime video and eight test screenshots, recording their version attribution and privacy-protection boundaries.
- 2026-09-11: Completed verification of the official iOS 2.5 series distribution channel and installed-version metadata, and added this public supplement.

Conclusions apply to the listed samples, checks and test conditions. Historical scores retain their original scope.

## 27. iOS 2.5 series: additional runtime evidence and signature record

2026-09-11: the VPNTestor test team recorded seven iOS runtime screenshots, public-video page verification and connected-device version verification.

Seven screenshots were reviewed: the client and home-screen widget display a connected state, feature selection and settings screens are visible, and the in-app network check displays responses. The speed-test screenshot shows an ongoing download test with an instantaneous reading of 1,032.52 Mbps. It is not a complete final result and has no verified binding to a particular connection state or installed build; it is therefore not a performance guarantee or proof of security approval.

The public video page, title and preview were checked. Its title identifies an iOS 2.5 internal-test build. It is retained as a series demonstration, not as proof that it is identical to the production installation sample. A security-test review of the complete video was not completed in this update.

On 2026-09-11, a read-only query of the connected iPhone 16 Pro Max confirmed SingLinkVPN version 2.5.1, build 18, consistent with the earlier sample record. This query did not execute connection-protection, privacy-leak or abnormal-recovery tests.

The VPNTestor test team records the release change scope as protocol adaptation and feature optimization. Historical security conclusions retain their original version scope; current connection and recovery results appear in Section 28.

This section records distribution and installed-version identity. iOS runtime and device-test results appear in Sections 27 and 28.

Accounts, device identifiers, subscriptions, traffic information and internal technical details in original screenshots remain in the restricted archive. This revision signs the six-language consolidated report and screenshot checksum lists, verifying file integrity and the publishing key.

### 27.1 Evidence and verification downloads

- [iOS series demonstration page](https://www.youtube.com/shorts/ZYpJXdSrDH8)
- [This supplementary record](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v3-en.md)
- [Signed file manifest](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v3.sha256)
- [Digital signature](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v3.sha256.sig)
- [Public verification key](/downloads/security-audits/singlinkvpn-v2.5-2026/James-Robert-Smith-Ed25519-Public-Key.pub)
- [Screenshot checksum list](/downloads/security-audits/singlinkvpn-mobile-2026/IOS-Evidence-Addendum-2026-09-11-screenshots.sha256)
- [Verification instructions](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v3-VERIFY.txt)

## 28. Android / iOS 2.5 series: connection and recovery test results

**Connection and recovery test results | 2026-09-11 | Revision 3**

The VPNTestor test team completed this batch of connection, browser local-address and real-device recovery tests. The test records follow.

| Record | Android 2.5 series | iOS 2.5 series |
| --- | --- | --- |
| Screenshots in this batch | 6 | 3 |
| Version archive (previously verified) | 2.5.8, build 5066 | 2.5.1, build 18 |
| State during submitted IP checks | VPN enabled | VPN enabled |
| Local-address check materials | 2 result screenshots | 1 result in 2 views |

The version archive indexes earlier sample records; this screenshot batch is filed under the 2.5 series.

**Connection and address checks**

| Test item | Reviewed result | Evidence source |
| --- | --- | --- |
| Android node connection | Both node interfaces display connected status | Connection screenshots in this batch |
| Android exit address | Two IP-check records display different exit values | IP-check screenshots in this batch |
| Android local-address enumeration | A local-scope network address was detected; no public address was listed in the results | 2 browser-result screenshots |
| iOS local-address enumeration | An anonymized hostname was detected; no numeric IP address was listed in the result | 2 views of the same browser result |

**Device recovery tests**

| Test item | Android result | iOS result | Evidence source |
| --- | --- | --- | --- |
| Recovery after screen lock | Normal; usable on opening | Normal; usable on opening | VPNTestor device test records |
| Recovery after network switching | Normal; usable on opening | Normal; usable on opening | VPNTestor device test records |
| Recovery after network interruption | Normal; usable on opening | Normal; usable on opening | VPNTestor device test records |

**Result summary:** All 3 recovery scenarios on each platform were normal. Screenshots document Android connection status and exit-value changes. Android local enumeration returned a local-scope address; iOS returned an anonymized hostname.

**Method and applicability:** This section uses VPNTestor test-team device records and screenshot verification. The browser check enumerates local addresses without external address-discovery services. Conclusions apply to the listed address visibility and recovery usability. “Usable on opening” is an operational result record, not millisecond timing or continuous leak monitoring.

**Evidence and privacy:** Checksums register 9 original images. Specific IP addresses, accounts and device identifiers are not public. The revision signature verifies file integrity and the publishing key; it does not change test provenance or expand the conclusions.

### 28.1 Evidence and signature downloads

- [Revised results report](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v3-en.md)
- [File checksum manifest](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v3.sha256)
- [Digital signature](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v3.sha256.sig)
- [Public verification key](/downloads/security-audits/singlinkvpn-v2.5-2026/James-Robert-Smith-Ed25519-Public-Key.pub)
- [Image checksum manifest](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Recovery-Feedback-2026-09-11-screenshots.sha256)
- [Verification instructions](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v3-VERIFY.txt)
- [Historical signed edition](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-2026-09-11-v3-en.md)

**Historical signed archives (superseded editions)**

- [Mobile-Audit-Supplement-2026-09-11](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Audit-Supplement-2026-09-11-en.md)
- [IOS-Evidence-Addendum-2026-09-11](/downloads/security-audits/singlinkvpn-mobile-2026/IOS-Evidence-Addendum-2026-09-11-en.md)
- [Mobile-Recovery-Results-2026-09-11-v2](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Recovery-Results-2026-09-11-v2-en.md)
- [Mobile-Recovery-Feedback-2026-09-11](/downloads/security-audits/singlinkvpn-mobile-2026/Mobile-Recovery-Feedback-2026-09-11-en.md)