Evil Nun: Horror at School
Data calls made by Evil Nun: Horror at School
Overview of network connections made by Evil Nun: Horror at School during the first 60 seconds after installation.
Evil Nun: Horror at School contacted 46 different domains within the first minute of opening. This data was collected from 4 independent scans We identified 36 ad creatives being loaded, confirming active ad monetization. across servers in 🇺🇸 🇬🇧 🇸🇪 🇨🇳 🇮🇪 🇷🇺, providing transparency into the app's actual network behavior and data sharing practices.
Scan Runs
4
Unique Domains
46
Ad Creatives Found
36
Countries
🇺🇸🇬🇧🇸🇪🇨🇳🇮🇪🇷🇺
Contacted Domains (46)
APIs
| January 27, 2026 at 08:49:25 | Firebase firebase-settings.crashlytics.com/spi/v2 | 🇺🇸 Google LLC | Request: Response: application/json | ||
| January 27, 2026 at 08:49:25 | Firebase firebaseinstallations.googleapis.com/v1/p... | 🇺🇸 Google LLC | Request: application/json Response: application/json | ||
| January 27, 2026 at 08:50:05 | Firebase firebaselogging-pa.googleapis.com/v1/firelog | 🇺🇸 Google LLC | Request: application/json Response: application/json | ||
| August 8, 2025 at 09:21:56 | msftconnecttest.com http://www.msftconnecttest.com | 🇺🇸 Akamai International B.V. | Request: Response: text/plain | ||
| August 8, 2025 at 09:21:09 | Google pagead2.googlesyndication.com/omsdk/releases | Request: Response: text/javascript | |||
| August 8, 2025 at 09:21:03 | katoid.com usdk.katoid.com/1.1.x/22418CC6-7A97-4115-... | 🇺🇸 AMAZON-02 | Request: Response: application/json | ||
| August 8, 2025 at 09:21:03 | Google google.com/ | Request: Response: text/html | |||
| August 8, 2025 at 09:21:03 | Firebase www.googleapis.com/identitytoolkit/v3 | Request: application/json Response: application/json | |||
| August 8, 2025 at 09:21:04 | Firebase www.googleapis.com/identitytoolkit/v3 | Request: application/json Response: application/json | |||
| August 8, 2025 at 09:21:04 | Google www.google.com/ | Request: Response: text/html | |||
| August 8, 2025 at 09:21:04 | keplerians.com crosspromo.keplerians.com/api/v3 | 🇬🇧 DIGITALOCEAN-ASN | Request: application/x-www-form-urlencoded Response: text/html | ||
| August 8, 2025 at 09:21:04 | Unity3d cdp.cloud.unity3d.com/v1/events | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: | ||
| August 8, 2025 at 09:21:04 | cloudflare-dns.com cloudflare-dns.com/dns-query | CLOUDFLARENET | Request: charset=utf-8 Response: application/dns-json | ||
| August 8, 2025 at 09:21:04 | Unity3d cdp.cloud.unity3d.com/v1/events | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: | ||
| August 8, 2025 at 09:21:04 | Amazon Web Services AWS cognito-identity.eu-north-1.amazonaws.com/ | 🇸🇪 AMAZON-02 | Request: application/x-amz-json-1.1 Response: application/x-amz-json-1.1 | ||
| August 8, 2025 at 09:21:04 | 223.5.5.5/resolve | 🇨🇳 Alibaba US Technology Co., Ltd. | Request: charset=utf-8 Response: application/json | ||
| August 8, 2025 at 09:21:04 | Yodo1 c1.yodo1.com/config | 🇺🇸 AMAZON-02 | Request: Response: application/json | ||
| August 8, 2025 at 09:21:04 | Yodo1 c1.yodo1.com/sync | 🇺🇸 AMAZON-02 | Request: text/plain Response: application/json | ||
| August 8, 2025 at 09:21:05 | katoid.com geo.katoid.com/city | 🇮🇪 AMAZON-02 | Request: application/json Response: application/json | ||
| August 8, 2025 at 09:21:05 | katoid.com geo.katoid.com/city | 🇮🇪 AMAZON-02 | Request: application/json Response: application/json | ||
| August 8, 2025 at 09:21:05 | Amazon Web Services AWS cognito-identity.eu-north-1.amazonaws.com/ | 🇸🇪 AMAZON-02 | Request: application/x-amz-json-1.1 Response: application/x-amz-json-1.1 | ||
| August 8, 2025 at 09:21:05 | Yodo1 sdk-mas.yodo1.com/v1/ip_info | 🇺🇸 AMAZON-02 | Request: Response: application/json | ||
| August 8, 2025 at 09:21:05 | Yodo1 sdk-mas.yodo1.com/v1/init | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| August 8, 2025 at 09:21:05 | Yodo1 sdk-mas.yodo1.com/v1/config | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| August 8, 2025 at 09:21:05 | Yodo1 sdk-mas.yodo1.com/v1/config | 🇺🇸 AMAZON-02 | Request: Response: application/json | ||
| August 8, 2025 at 09:20:58 | Yandex startup.mobile.yandex.net/analytics/startup | 🇷🇺 YANDEX LLC | Request: Response: application/octet-stream | ||
| August 8, 2025 at 09:20:59 | Yandex report.appmetrica.yandex.net/report | 🇷🇺 YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| August 8, 2025 at 09:21:00 | Yandex report.appmetrica.yandex.net/report | 🇷🇺 YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| August 8, 2025 at 09:21:03 | msftconnecttest.com http://www.msftconnecttest.com | 🇺🇸 Akamai International B.V. | Request: Response: text/plain | ||
| August 8, 2025 at 09:21:03 | Firebase firebaseinstallations.googleapis.com/v1/p... | Request: application/json Response: application/json | |||
| August 8, 2025 at 09:21:03 | Unity3d config.uca.cloud.unity3d.com/ | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| August 8, 2025 at 09:21:06 | keplerians.com crosspromo.keplerians.com/api/v3 | 🇬🇧 DIGITALOCEAN-ASN | Request: application/x-www-form-urlencoded Response: text/html | ||
| August 8, 2025 at 09:21:06 | Amazon Advertisement c.amazon-adsystem.com/aps_mobile_client_c... | 🇺🇸 AMAZON-02 | Request: Response: application/json | ||
| August 8, 2025 at 09:21:06 | AppLovin ms.applovin.com/5.0/i | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| August 8, 2025 at 09:21:06 | AppLovin ms.applovin.com/5.0/i | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| August 8, 2025 at 09:21:06 | AppLovin ms.applovin.com/5.0/i | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| August 8, 2025 at 09:21:06 | keplerians.com crosspromo.keplerians.com/api/v3 | 🇬🇧 DIGITALOCEAN-ASN | Request: application/json Response: application/json | ||
| August 8, 2025 at 09:21:06 | Amazon Web Services AWS firehose.eu-north-1.amazonaws.com/ | 🇸🇪 AMAZON-02 | Request: application/x-amz-json-1.1 Response: application/x-amz-json-1.1 | ||
| August 8, 2025 at 09:21:07 | keplerians.com crosspromo.keplerians.com/api/v3 | 🇬🇧 DIGITALOCEAN-ASN | Request: Response: application/json | ||
| August 8, 2025 at 09:21:07 | AppLovin d.applovin.com/2.0/device | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| August 8, 2025 at 09:21:07 | AppLovin d.applovin.com/2.0/device | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| August 8, 2025 at 09:21:07 | Unity3d configv2.unityads.unity3d.com/webview/4.12.2 | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/x-www-form-urlencoded Response: application/json | ||
| August 8, 2025 at 09:21:07 | Fyber cdn2.inner-active.mobi/ia-sdk-config/conf... | 🇺🇸 FASTLY | Request: Response: application/json | ||
| August 8, 2025 at 09:21:07 | AppLovin sts.applovin.com/v1/stats | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: | ||
| August 8, 2025 at 09:21:07 | Fyber cdn2.inner-active.mobi/ia-sdk-config/apps | 🇺🇸 FASTLY | Request: Response: application/json | ||
| August 8, 2025 at 09:21:07 | Unity3d i-sdk.mediation.unity3d.com/sdk/v8.3.0 | 🇺🇸 AMAZON-02 | Request: application/json Response: application/json | ||
| August 8, 2025 at 09:21:07 | BidMachine api.bidmachine.io/auction/init | CLOUDFLARENET | Request: application/x-protobuf Response: application/x-protobuf | ||
| August 8, 2025 at 09:21:07 | BIGO Ads gdl.news-cdn.site/as/bigo-ad-creatives | 🇺🇸 NETSTAR SG PTE. LTD. | Request: Response: application/javascript | ||
| August 8, 2025 at 09:21:07 | Firebase app-measurement.com/config/app | Request: Response: application/x-protobuf | |||
| August 8, 2025 at 09:21:07 | Vungle config.ads.vungle.com/config | 🇺🇸 AMAZON-AES | Request: application/json Response: application/json |