Line Up: Draw the Criminal
Data calls made by Line Up: Draw the Criminal
Overview of network connections made by Line Up: Draw the Criminal during the first 60 seconds after installation.
Line Up: Draw the Criminal contacted 15 different domains within the first minute of opening. This data was collected from 5 independent scans We identified 6 ad creatives being loaded, confirming active ad monetization. across servers in 🇺🇸 🇷🇺 🇬🇧 🇮🇪, providing transparency into the app's actual network behavior and data sharing practices.
Scan Runs
5
Unique Domains
15
Ad Creatives Found
6
Countries
🇺🇸🇷🇺🇬🇧🇮🇪
Contacted Domains (15)
APIs
| February 1, 2026 at 12:06:44 | Facebook graph.facebook.com/v16.0/app | 🇺🇸 Facebook, Inc. | Request: application/x-www-form-urlencoded Response: text/javascript | ||
| February 1, 2026 at 12:06:44 | Facebook graph.facebook.com/v16.0/235815964236550 | 🇺🇸 Facebook, Inc. | Request: application/x-www-form-urlencoded Response: text/javascript | ||
| February 1, 2026 at 12:06:44 | Firebase firebaseinstallations.googleapis.com/v1/p... | 🇺🇸 Google LLC | Request: application/json Response: application/json | ||
| February 1, 2026 at 12:06:44 | Facebook graph.facebook.com/v16.0/app | 🇺🇸 Facebook, Inc. | Request: application/x-www-form-urlencoded Response: text/javascript | ||
| February 1, 2026 at 12:06:44 | Facebook graph.facebook.com/v16.0/app | 🇺🇸 Facebook, Inc. | Request: application/x-www-form-urlencoded Response: text/javascript | ||
| February 1, 2026 at 12:06:44 | Facebook graph.facebook.com/v16.0/app | 🇺🇸 Facebook, Inc. | Request: application/x-www-form-urlencoded Response: text/javascript | ||
| February 1, 2026 at 12:06:45 | Firebase firebase-settings.crashlytics.com/spi/v2 | 🇺🇸 Google LLC | Request: Response: application/json | ||
| February 1, 2026 at 12:06:45 | Facebook graph.facebook.com/v16.0/app | 🇺🇸 Facebook, Inc. | Request: application/x-www-form-urlencoded Response: text/javascript | ||
| February 1, 2026 at 12:06:45 | Yandex yandex.ru/ads/v1 | 🇷🇺 YANDEX LLC | Request: Response: | ||
| February 1, 2026 at 12:06:44 | Facebook graph.facebook.com/v16.0/235815964236550 | 🇺🇸 Facebook, Inc. | Request: application/x-www-form-urlencoded Response: text/javascript | ||
| February 1, 2026 at 12:06:46 | Yandex startup.mobile.yandex.net/analytics/startup | 🇷🇺 YANDEX LLC | Request: Response: application/octet-stream | ||
| February 1, 2026 at 12:06:48 | Yandex report.appmetrica.yandex.net/report | 🇷🇺 YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| February 1, 2026 at 12:06:48 | Yandex report.appmetrica.yandex.net/report | 🇷🇺 YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| February 1, 2026 at 12:07:37 | Firebase firebaselogging-pa.googleapis.com/v1/firelog | 🇺🇸 Google LLC | Request: application/json Response: application/json | ||
| February 1, 2026 at 12:07:40 | Firebase firebaselogging.googleapis.com/v0cc/log | 🇺🇸 Google LLC | Request: application/json Response: application/json | ||
| June 4, 2025 at 23:12:31 | AppsFlyer eigmns-cdn-settings.appsflyersdk.com/andr... | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| June 4, 2025 at 23:12:31 | Yandex startup.mobile.yandex.net/analytics/startup | 🇷🇺 YANDEX LLC | Request: Response: application/octet-stream | ||
| June 4, 2025 at 23:12:32 | Unity3d config.uca.cloud.unity3d.com/ | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| June 4, 2025 at 23:12:32 | Kwalee server-live.kwalee.com/get_country | 🇺🇸 AMAZON-02 | Request: Response: application/json | ||
| June 4, 2025 at 23:12:32 | Firebase firebaseinstallations.googleapis.com/v1/p... | Request: application/json Response: application/json | |||
| June 4, 2025 at 23:12:32 | Kwalee server-live.kwalee.com/get_analytics_para... | 🇺🇸 AMAZON-02 | Request: Response: application/json | ||
| June 4, 2025 at 23:12:33 | Unity3d cdp.cloud.unity3d.com/v1/events | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: | ||
| June 4, 2025 at 23:12:33 | Unity3d cdp.cloud.unity3d.com/v1/events | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: | ||
| June 4, 2025 at 23:12:33 | Google fundingchoicesmessages.google.com/a/consent | Request: application/json Response: application/json | |||
| June 4, 2025 at 23:12:33 | Playgap api.prod.playgap.io/api/v1 | 🇬🇧 AMAZON-02 | Request: Response: application/json | ||
| June 4, 2025 at 23:12:33 | Yandex report.appmetrica.yandex.net/report | 🇷🇺 YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| June 4, 2025 at 23:12:33 | Firebase firebaseremoteconfig.googleapis.com/v1/pr... | Request: application/json Response: application/json | |||
| June 4, 2025 at 23:12:33 | Yandex report.appmetrica.yandex.net/report | 🇷🇺 YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| June 4, 2025 at 23:12:33 | Google play-lh.googleusercontent.com/YLkvgZgB-vk... | Request: Response: image/png | |||
| June 4, 2025 at 23:12:33 | Google play-lh.googleusercontent.com/YLkvgZgB-vk... | Request: Response: image/png | |||
| June 4, 2025 at 23:12:34 | AppsFlyer eigmns-dlsdk.appsflyersdk.com/v1.0/android | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| June 4, 2025 at 23:12:34 | Yandex report.appmetrica.yandex.net/report | 🇷🇺 YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| June 4, 2025 at 23:12:33 | Google play-lh.googleusercontent.com/v086PRv6VaD... | Request: Response: image/png | |||
| June 4, 2025 at 23:12:34 | b-cdn.net playgap.b-cdn.net/9bfac20c-aea1-44f1-9b59... | 🇺🇸 Datacamp Limited | Request: Response: video/webm |  | |
| June 4, 2025 at 23:12:34 | AppsFlyer eigmns-conversions.appsflyersdk.com/api/v... | 🇺🇸 AMAZON-02 | Request: application/octet-stream Response: text/plain | ||
| June 4, 2025 at 23:12:35 | b-cdn.net playgap.b-cdn.net/8ac34382-b585-4697-9b93... | 🇺🇸 Datacamp Limited | Request: Response: video/webm |  | |
| June 4, 2025 at 23:12:35 | b-cdn.net playgap.b-cdn.net/b1556e73-5305-43c7-9d75... | 🇺🇸 Datacamp Limited | Request: Response: video/webm |  | |
| June 4, 2025 at 23:12:35 | AppsFlyer eigmns-gcdsdk.appsflyersdk.com/install_da... | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| June 4, 2025 at 23:12:43 | Facebook graph.facebook.com/v16.0/app | Request: application/x-www-form-urlencoded Response: text/javascript | |||
| June 4, 2025 at 23:12:43 | huqindustries.co.uk api.huqindustries.co.uk/analyse/1.2 | 🇺🇸 AMAZON-02 | Request: application/json Response: application/octet-stream | ||
| June 4, 2025 at 23:12:43 | Facebook graph.facebook.com/v16.0/235815964236550 | Request: application/x-www-form-urlencoded Response: text/javascript | |||
| June 4, 2025 at 23:12:43 | Facebook graph.facebook.com/v16.0/app | Request: application/x-www-form-urlencoded Response: text/javascript | |||
| June 4, 2025 at 23:12:43 | Facebook graph.facebook.com/v16.0/app | Request: application/x-www-form-urlencoded Response: text/javascript | |||
| June 4, 2025 at 23:12:44 | Facebook graph.facebook.com/v16.0/app | Request: application/x-www-form-urlencoded Response: text/javascript | |||
| June 4, 2025 at 23:12:44 | Facebook graph.facebook.com/v16.0/235815964236550 | Request: application/x-www-form-urlencoded Response: text/javascript | |||
| June 4, 2025 at 23:12:59 | Firebase firebaselogging-pa.googleapis.com/v1/firelog | Request: application/json Response: application/json | |||
| June 4, 2025 at 23:13:01 | Firebase firebaselogging.googleapis.com/v0cc/log | Request: application/json Response: application/json | |||
| October 3, 2025 at 09:18:58 | Firebase play.googleapis.com/play/log | Request: Response: text/plain | |||
| October 3, 2025 at 09:18:58 | Firebase play.googleapis.com/play/log | Request: application/x-gzip Response: text/plain | |||
| October 3, 2025 at 09:18:08 | AppsFlyer eigmns-gcdsdk.appsflyersdk.com/install_da... | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json |