AppGoblinSwamp Attack
Data calls made by Swamp Attack
Overview of network connections made by Swamp Attack during the first 60 seconds after installation.
Swamp Attack contacted 3 different domains within the first minute of opening. This data was collected from 1 independent scan We identified 0 ad creatives being loaded, confirming active ad monetization. across servers in 🇷🇺 🇺🇸, providing transparency into the app's actual network behavior and data sharing practices.
Scan Runs
1
Unique Domains
3
Ad Creatives Found
0
Countries
🇷🇺🇺🇸
Contacted Domains (3)
| July 7, 2025 at 19:03:30 | Yandex startup.mobile.yandex.net/analytics/startup | 🇷🇺 YANDEX LLC | Request: Response: application/octet-stream | ||
| July 7, 2025 at 19:03:31 | Yandex report.appmetrica.yandex.net/report | 🇷🇺 YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| July 7, 2025 at 19:03:31 | Firebase android.googleapis.com/auth/devicekey | Request: application/x-protobuf Response: text/html | |||
| July 7, 2025 at 19:03:32 | Yandex report.appmetrica.yandex.net/report | 🇷🇺 YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| July 7, 2025 at 19:03:32 | Firebase notifications-pa.googleapis.com/google.in... | Request: application/grpc Response: application/grpc | |||
| July 7, 2025 at 19:03:32 | Yandex report.appmetrica.yandex.net/report | 🇷🇺 YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| July 7, 2025 at 19:03:33 | Qonversion api.qonversion.io/v3/users | Request: application/json Response: application/json | |||
| July 7, 2025 at 19:04:12 | Firebase notifications-pa.googleapis.com/google.in... | Request: application/grpc Response: application/grpc | |||
| July 7, 2025 at 19:04:13 | Firebase firebaselogging-pa.googleapis.com/v1/firelog | Request: application/json Response: application/json | |||
| July 7, 2025 at 19:04:15 | Firebase firebaselogging.googleapis.com/v0cc/log | Request: application/json Response: application/json |