Find VPN destination IP address over WiFi

edit

Hi gang,

Need some help here from experts because my experience with WireShark is not that great and I've hit a brick wall.

I want to find the IP addresses of several VPN servers used in a popular VPN App ( VPN Super Unlimited Proxy by Mobile Jump Pte Ltd) so that I can block them. Unfortunately the PC app uses different servers so even though I got their address using WireShark and blocked them on the firewall, the phone App still connects to a few.

I understand that once the VPN connects all traffic is encrypted but there should be some initial unencrypted request via IP where I can find the destination IP address, Am I mistaken?

If so, is there any way to find the destination IP? The only packet from the phone I see is an MDNS request and I wonder if it has something to do with the VPN. I wanted to upload the capture and MDNS screenshot but it doesn't let me because I'm a newbie to the forum (need 60 points to upload file) :-(((

Any help will be greatly appreciated!

Here's the link to the files (thanks Chuckc for the suggestion): https://www.dropbox.com/scl/fo/y2jo5a...

I also included a pcap in monitor mode that has all the RF data but I cannot find any IP addresses.

The device initiating the VPN is Apple Iphone 90:81:58:55:A2:43 or 192.168.9.31.

Cheers, Andres