I'm analyzing all the traffic on my phone because my WhatsApp app is being monitored. WhatsApp connects to an IP address belonging to a government institution and is behaving strangely. I also see that the DNS daemon is constantly connecting to a local IP address and another IP address from a neighboring country, without changing its IP address.