AOD Flow: Always On Display
Data calls made by AOD Flow: Always On Display
Overview of network connections made by AOD Flow: Always On Display during the first 60 seconds after installation.
AOD Flow: Always On Display contacted 6 different domains within the first minute of opening. This data was collected from 6 independent scans We identified 1 ad creative being loaded, confirming active ad monetization. across servers in 🇺🇸, providing transparency into the app's actual network behavior and data sharing practices.
Scan Runs
6
Unique Domains
6
Ad Creatives Found
1
Countries
🇺🇸
Contacted Domains (6)
APIs
| July 12, 2025 at 08:43:27 | Google fundingchoicesmessages.google.com/a/consent | Request: application/json Response: application/json | |||
| July 12, 2025 at 08:43:27 | Firebase firebaseinstallations.googleapis.com/v1/p... | Request: application/json Response: application/json | |||
| July 12, 2025 at 08:43:27 | Google fundingchoicesmessages.google.com/a/consent | Request: application/json Response: | |||
| July 12, 2025 at 08:43:58 | Firebase firebase-settings.crashlytics.com/spi/v2 | Request: Response: application/json | |||
| July 12, 2025 at 08:43:58 | Firebase firebase-settings.crashlytics.com/spi/v2 | Request: Response: application/json | |||
| November 10, 2025 at 09:18:02 | Firebase firebase-settings.crashlytics.com/spi/v2 | Request: Response: application/json | |||
| November 10, 2025 at 09:18:02 | Firebase firebase-settings.crashlytics.com/spi/v2 | Request: Response: application/json | |||
| November 10, 2025 at 09:18:02 | Firebase firebaseinstallations.googleapis.com/v1/p... | Request: application/json Response: application/json | |||
| November 10, 2025 at 09:18:02 | Google googleads.g.doubleclick.net/mads/static | Request: Response: | |||
| November 10, 2025 at 09:18:02 | Google googleads.g.doubleclick.net/mads/static | Request: Response: | |||
| November 10, 2025 at 09:18:29 | Firebase play.googleapis.com/play/log | Request: Response: text/plain | |||
| November 10, 2025 at 09:18:30 | Firebase play.googleapis.com/play/log | Request: application/x-gzip Response: text/plain | |||
| March 11, 2026 at 07:05:13 | Google www.gstatic.com/droidguard/E054CA794C125F... | 🇺🇸 Google LLC | Request: Response: text/html | ||
| March 11, 2026 at 07:05:14 | Google www.gstatic.com/gpm-passkeys-privileged-a... | 🇺🇸 Google LLC | Request: Response: application/json | ||
| March 11, 2026 at 07:05:14 | Firebase www.googleapis.com/androidantiabuse/v1 | 🇺🇸 Google LLC | Request: application/x-protobuf Response: application/x-protobuf | ||
| March 11, 2026 at 07:04:58 | Firebase firebase-settings.crashlytics.com/spi/v2 | 🇺🇸 Google LLC | Request: Response: application/json | ||
| March 11, 2026 at 07:04:58 | Firebase firebase-settings.crashlytics.com/spi/v2 | 🇺🇸 Google LLC | Request: Response: application/json | ||
| March 11, 2026 at 07:04:58 | Firebase firebaseinstallations.googleapis.com/v1/p... | 🇺🇸 Google LLC | Request: application/json Response: application/json | ||
| March 11, 2026 at 07:04:59 | Google fundingchoicesmessages.google.com/a/consent | 🇺🇸 Google LLC | Request: application/json Response: application/json | ||
| March 11, 2026 at 07:05:12 | Firebase android.googleapis.com/auth/devicekey | 🇺🇸 Google LLC | Request: application/x-protobuf Response: text/html | ||
| March 11, 2026 at 07:05:14 | Firebase www.googleapis.com/androidantiabuse/v1 | 🇺🇸 Google LLC | Request: application/x-protobuf Response: application/x-protobuf | ||
| March 11, 2026 at 07:05:15 | Firebase www.googleapis.com/androidantiabuse/v1 | 🇺🇸 Google LLC | Request: application/x-protobuf Response: application/x-protobuf | ||
| March 11, 2026 at 07:05:15 | Firebase www.googleapis.com/androidantiabuse/v1 | 🇺🇸 Google LLC | Request: application/x-protobuf Response: application/x-protobuf | ||
| March 11, 2026 at 07:05:16 | Firebase www.googleapis.com/androidantiabuse/v1 | 🇺🇸 Google LLC | Request: application/x-protobuf Response: application/x-protobuf | ||
| July 10, 2026 at 07:07:57 | Firebase firebase-settings.crashlytics.com/spi/v2 | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 10, 2026 at 07:07:57 | Firebase firebase-settings.crashlytics.com/spi/v2 | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 10, 2026 at 07:07:57 | Firebase firebaseinstallations.googleapis.com/v1/p... | 🇺🇸 Google LLC | Request: application/json Response: application/json | ||
| July 10, 2026 at 07:07:57 | androxus.com androxus.com/api/v1 | Cloudflare, Inc. | Request: Response: video/mp4 |  | |
| July 10, 2026 at 07:08:04 | Firebase play.googleapis.com/play/log | 🇺🇸 Google LLC | Request: Response: text/plain | ||
| July 10, 2026 at 07:08:04 | Firebase play.googleapis.com/play/log | 🇺🇸 Google LLC | Request: application/x-gzip Response: text/plain | ||
| July 23, 2026 at 13:13:23 | Firebase firebase-settings.crashlytics.com/spi/v2 | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 23, 2026 at 13:13:23 | Firebase firebaseinstallations.googleapis.com/v1/p... | 🇺🇸 Google LLC | Request: application/json Response: application/json | ||
| July 23, 2026 at 13:13:23 | Firebase firebase-settings.crashlytics.com/spi/v2 | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 23, 2026 at 13:13:23 | androxus.com androxus.com/api/v1 | Cloudflare, Inc. | Request: Response: video/mp4 | ||
| July 23, 2026 at 13:13:23 | Google googleads.g.doubleclick.net/mads/gma | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 23, 2026 at 13:13:23 | Google googleads.g.doubleclick.net/mads/gma | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 23, 2026 at 13:13:23 | Google googleads.g.doubleclick.net/mads/gma | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 23, 2026 at 13:13:31 | Firebase firebase-settings.crashlytics.com/spi/v2 | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 23, 2026 at 13:13:31 | Firebase firebaselogging-pa.googleapis.com/v1/firelog | 🇺🇸 Google LLC | Request: application/json Response: NaN | ||
| July 23, 2026 at 13:13:31 | Google googleads.g.doubleclick.net/mads/static | 🇺🇸 Google LLC | Request: Response: NaN | ||
| July 23, 2026 at 13:13:31 | androxus.com androxus.com/api/v1 | Cloudflare, Inc. | Request: Response: video/mp4 | ||
| July 23, 2026 at 13:13:31 | Google googleads.g.doubleclick.net/mads/gma | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 23, 2026 at 13:13:31 | Google googleads.g.doubleclick.net/mads/gma | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 23, 2026 at 13:13:31 | Google googleads.g.doubleclick.net/mads/gma | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 23, 2026 at 13:13:44 | Firebase firebase-settings.crashlytics.com/spi/v2 | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 23, 2026 at 13:13:44 | androxus.com androxus.com/api/v1 | Cloudflare, Inc. | Request: Response: video/mp4 | ||
| July 23, 2026 at 13:13:44 | Google googleads.g.doubleclick.net/mads/gma | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 23, 2026 at 13:13:44 | Google googleads.g.doubleclick.net/mads/gma | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 23, 2026 at 13:13:44 | Google googleads.g.doubleclick.net/mads/gma | 🇺🇸 Google LLC | Request: Response: application/json | ||
| July 23, 2026 at 13:13:59 | Firebase play.googleapis.com/play/log | 🇺🇸 Google LLC | Request: Response: text/plain |