AppGoblinReturn of Shadow
Data calls made by Return of Shadow
Overview of network connections made by Return of Shadow during the first 60 seconds after installation.
Return of Shadow contacted 8 different domains within the first minute of opening. This data was collected from 1 independent scan We identified 0 ad creatives being loaded, confirming active ad monetization. across servers in 🇺🇸 🇨🇳, providing transparency into the app's actual network behavior and data sharing practices.
Scan Runs
1
Unique Domains
8
Ad Creatives Found
0
Countries
🇺🇸🇨🇳
Contacted Domains (8)
| October 4, 2025 at 09:34:08 | Facebook graph.facebook.com/v14.0/app | 🇺🇸 FACEBOOK | Request: application/x-www-form-urlencoded Response: text/javascript | ||
| October 4, 2025 at 09:34:08 | Facebook graph.facebook.com/v14.0/1415307665632922 | 🇺🇸 FACEBOOK | Request: application/x-www-form-urlencoded Response: text/javascript | ||
| October 4, 2025 at 09:34:09 | AIHelp starunion.aihelp.net/elva/api | 🇺🇸 SOFTLAYER | Request: Response: application/json | ||
| October 4, 2025 at 09:34:09 | AIHelp starunion.aihelp.net/elva/api | 🇺🇸 SOFTLAYER | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:09 | AIHelp starunion.aihelp.net/elva/api | 🇺🇸 SOFTLAYER | Request: Response: application/json | ||
| October 4, 2025 at 09:34:09 | AppsFlyer cdn-settings.appsflyersdk.com/android/v1 | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:10 | AIHelp p1-config.cdn-aihelp.net/sdkconfig/locale... | CLOUDFLARENET | Request: Response: application/json | ||
| October 4, 2025 at 09:34:10 | AIHelp starunion.config.cdn-aihelp.net/OPerMode/... | CLOUDFLARENET | Request: Response: application/json | ||
| October 4, 2025 at 09:34:10 | AIHelp cdn.aihelp.net/elva/faq | CLOUDFLARENET | Request: Response: application/json | ||
| October 4, 2025 at 09:34:10 | AIHelp starunion.config.cdn-aihelp.net/text/default | CLOUDFLARENET | Request: Response: application/json | ||
| October 4, 2025 at 09:34:10 | AIHelp cdn.aihelp.net/elva/style | CLOUDFLARENET | Request: Response: application/json | ||
| October 4, 2025 at 09:34:10 | AIHelp starunion.config.cdn-aihelp.net/business/... | CLOUDFLARENET | Request: Response: application/json | ||
| October 4, 2025 at 09:34:10 | AppsFlyer conversions.appsflyersdk.com/api/v6.14 | 🇺🇸 AMAZON-02 | Request: application/octet-stream Response: text/plain | ||
| October 4, 2025 at 09:34:11 | allstarunion.com p0202.ga.allstarunion.com/auth/reportevent | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:11 | allstarunion.com p0202.ga.allstarunion.com/auth/checkupdate | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:11 | allstarunion.com p0202.ga.allstarunion.com/auth/reportevent | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:11 | QQ android.bugly.qq.com/rqd/async | 🇨🇳 Chinanet | Request: application/x-www-form-urlencoded Response: | ||
| October 4, 2025 at 09:34:11 | AppsFlyer inapps.appsflyersdk.com/api/v6.14 | 🇺🇸 AMAZON-02 | Request: application/octet-stream Response: text/plain | ||
| October 4, 2025 at 09:34:11 | AppsFlyer inapps.appsflyersdk.com/api/v6.14 | 🇺🇸 AMAZON-02 | Request: application/octet-stream Response: text/plain | ||
| October 4, 2025 at 09:34:11 | AppsFlyer inapps.appsflyersdk.com/api/v6.14 | 🇺🇸 AMAZON-02 | Request: application/octet-stream Response: text/plain | ||
| October 4, 2025 at 09:34:11 | AppsFlyer inapps.appsflyersdk.com/api/v6.14 | 🇺🇸 AMAZON-02 | Request: application/octet-stream Response: text/plain | ||
| October 4, 2025 at 09:34:11 | AppsFlyer inapps.appsflyersdk.com/api/v6.14 | 🇺🇸 AMAZON-02 | Request: application/octet-stream Response: text/plain | ||
| October 4, 2025 at 09:34:11 | allstarunion.com p0202.ga.allstarunion.com/auth/reportevent | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:12 | allstarunion.com p0202.ga.allstarunion.com/auth/reportevent | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:12 | allstarunion.com p0202.ga.allstarunion.com/auth/reportevent | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:12 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream | ||
| October 4, 2025 at 09:34:12 | AppsFlyer inapps.appsflyersdk.com/api/v6.14 | 🇺🇸 AMAZON-02 | Request: application/octet-stream Response: text/plain | ||
| October 4, 2025 at 09:34:13 | allstarunion.com p0202.ga.allstarunion.com/auth/reportevent | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:13 | allstarunion.com p0202.ga.allstarunion.com/auth/reportevent | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:13 | AppsFlyer inapps.appsflyersdk.com/api/v6.14 | 🇺🇸 AMAZON-02 | Request: application/octet-stream Response: text/plain | ||
| October 4, 2025 at 09:34:13 | AppsFlyer inapps.appsflyersdk.com/api/v6.14 | 🇺🇸 AMAZON-02 | Request: application/octet-stream Response: text/plain | ||
| October 4, 2025 at 09:34:13 | allstarunion.com p0202.ga.allstarunion.com/auth/reportevent | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:13 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream | ||
| October 4, 2025 at 09:34:13 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream | ||
| October 4, 2025 at 09:34:13 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream | ||
| October 4, 2025 at 09:34:13 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream | ||
| October 4, 2025 at 09:34:13 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream | ||
| October 4, 2025 at 09:34:11 | AppsFlyer gcdsdk.appsflyersdk.com/install_data/v5.0 | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:14 | allstarunion.com p0202.ga.allstarunion.com/auth/reportevent | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:14 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream | ||
| October 4, 2025 at 09:34:14 | allstarunion.com p0202.ga.allstarunion.com/auth/reportevent | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:14 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream | ||
| October 4, 2025 at 09:34:14 | allstarunion.com p0202.ga.allstarunion.com/auth/reportevent | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:14 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream | ||
| October 4, 2025 at 09:34:14 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream | ||
| October 4, 2025 at 09:34:14 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream | ||
| October 4, 2025 at 09:34:15 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream | ||
| October 4, 2025 at 09:34:15 | allstarunion.com p0202.ga.allstarunion.com/auth/reportevent | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| October 4, 2025 at 09:34:15 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream | ||
| October 4, 2025 at 09:34:15 | allstarunion.com p0801-production-cdn.allstarunion.com/hot... | 🇺🇸 AMAZON-02 | Request: Response: binary/octet-stream |