AppGoblinTrain Attack: Merge War
Data calls made by Train Attack: Merge War
Overview of network connections made by Train Attack: Merge War during the first 60 seconds after installation.
Train Attack: Merge War contacted 4 different domains within the first minute of opening. This data was collected from 1 independent scan We identified 0 ad creatives being loaded, confirming active ad monetization. across servers in 🇺🇸 🇷🇺, providing transparency into the app's actual network behavior and data sharing practices.
Scan Runs
1
Unique Domains
4
Ad Creatives Found
0
Countries
🇺🇸🇷🇺
Contacted Domains (4)
| September 2, 2025 at 08:36:40 | Facebook graph.facebook.com/v16.0/app | Request: application/x-www-form-urlencoded Response: text/javascript | |||
| September 2, 2025 at 08:36:40 | Firebase firebaseinstallations.googleapis.com/v1/p... | Request: application/json Response: application/json | |||
| September 2, 2025 at 08:36:40 | Facebook graph.facebook.com/v16.0/637752589294115 | Request: application/x-www-form-urlencoded Response: text/javascript | |||
| September 2, 2025 at 08:36:40 | Facebook graph.facebook.com/v16.0/637752589294115 | Request: application/x-www-form-urlencoded Response: text/javascript | |||
| September 2, 2025 at 08:36:46 | AppLovin ms.applovin.com/5.0/i | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| September 2, 2025 at 08:36:47 | AppLovin rt.applovin.com/4.0/pix | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| September 2, 2025 at 08:36:48 | Yandex startup.mobile.yandex.net/analytics/startup | 🇷🇺 YANDEX LLC | Request: Response: application/octet-stream | ||
| September 2, 2025 at 08:36:49 | Yandex report.appmetrica.yandex.net/report | 🇷🇺 YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| September 2, 2025 at 08:36:50 | Yandex report.appmetrica.yandex.net/report | 🇷🇺 YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| September 2, 2025 at 08:37:03 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| September 2, 2025 at 08:37:03 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| September 2, 2025 at 08:37:04 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| September 2, 2025 at 08:37:04 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| September 2, 2025 at 08:37:04 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| September 2, 2025 at 08:37:04 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| September 2, 2025 at 08:37:05 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| September 2, 2025 at 08:37:25 | Firebase firebaselogging.googleapis.com/v0cc/log | Request: application/json Response: application/json |