Dark Mode for All Apps
Data calls made by Dark Mode for All Apps
Overview of network connections made by Dark Mode for All Apps during the first 60 seconds after installation.
Dark Mode for All Apps contacted 11 different domains within the first minute of opening. This data was collected from 3 independent scans We identified 6 ad creatives being loaded, confirming active ad monetization. across servers in 🇷🇺 🇺🇸 🇹🇼, providing transparency into the app's actual network behavior and data sharing practices.
Scan Runs
3
Unique Domains
11
Ad Creatives Found
6
Countries
🇷🇺🇺🇸🇹🇼
Contacted Domains (11)
| January 18, 2026 at 03:40:25 | Yandex startup.mobile.yandex.net/analytics/startup | 🇷🇺 YANDEX LLC | Request: Response: application/octet-stream | ||
| January 18, 2026 at 03:40:27 | zipoapps.com config.toto.zipoapps.com/v1/apps | 🇺🇸 AMAZON-02 | Request: application/json Response: text/html | ||
| January 18, 2026 at 03:40:27 | Firebase firebaseinstallations.googleapis.com/v1/p... | Request: application/json Response: application/json | |||
| January 18, 2026 at 03:40:27 | Google googleads.g.doubleclick.net/mads/static | Request: Response: text/html | |||
| January 18, 2026 at 03:40:28 | Google googleads.g.doubleclick.net/favicon.ico | Request: Response: image/x-icon | |||
| January 18, 2026 at 03:40:28 | Google googleads.g.doubleclick.net/getconfig/pub... | Request: Response: application/json | |||
| January 18, 2026 at 03:40:29 | Facebook www.facebook.com/adnw_sync2 | Request: application/x-www-form-urlencoded Response: text/javascript | |||
| January 18, 2026 at 03:40:30 | AppLovin ms.applovin.com/5.0/i | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| January 18, 2026 at 03:40:30 | Google googleads.g.doubleclick.net/mads/static | Request: Response: text/html | |||
| January 18, 2026 at 03:40:31 | Google googleads.g.doubleclick.net/mads/static | Request: Response: text/javascript | |||
| January 18, 2026 at 03:40:31 | Google googleads.g.doubleclick.net/mads/static | Request: Response: text/cache-manifest | |||
| January 18, 2026 at 03:40:31 | AppLovin d.applovin.com/2.0/device | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| January 18, 2026 at 03:40:31 | AppLovin rt.applovin.com/4.0/pix | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| January 18, 2026 at 03:40:31 | Google googleads.g.doubleclick.net/mads/static | Request: Response: text/javascript | |||
| January 18, 2026 at 03:40:32 | Google googleads.g.doubleclick.net/mads/gma | Request: Response: application/json | |||
| January 18, 2026 at 03:40:33 | Google pagead2.googlesyndication.com/omsdk/releases | Request: Response: text/javascript | |||
| January 18, 2026 at 03:40:33 | Google pagead2.googlesyndication.com/omsdk/releases | Request: Response: text/javascript | |||
| January 18, 2026 at 03:40:33 | kwcdn.com img.kwcdn.com/product/e15388a2 | 🇺🇸 FASTLY | Request: Response: image/jpeg |  | |
| January 18, 2026 at 03:40:32 | Google googleads.g.doubleclick.net/mads/gma | Request: Response: application/json | |||
| January 18, 2026 at 03:40:33 | kwcdn.com img.kwcdn.com/product/fancy | 🇺🇸 FASTLY | Request: Response: image/jpeg |  | |
| January 18, 2026 at 03:40:33 | Google www.googletagservices.com/activeview/js | Request: Response: text/javascript | |||
| January 18, 2026 at 03:40:34 | Google tpc.googlesyndication.com/pagead/js | Request: Response: text/javascript | |||
| January 18, 2026 at 03:40:34 | Google tpc.googlesyndication.com/pagead/js | Request: Response: text/javascript | |||
| January 18, 2026 at 03:40:34 | Google googleads.g.doubleclick.net/pagead/intera... | Request: Response: image/gif | |||
| January 18, 2026 at 03:40:33 | kwcdn.com img.kwcdn.com/product/open | 🇺🇸 FASTLY | Request: Response: image/jpeg |  | |
| January 18, 2026 at 03:40:33 | kwcdn.com img.kwcdn.com/product/open | 🇺🇸 FASTLY | Request: Response: image/jpeg |  | |
| January 18, 2026 at 03:40:33 | kwcdn.com img.kwcdn.com/product/fancy | 🇺🇸 FASTLY | Request: Response: image/jpeg |  | |
| January 18, 2026 at 03:40:33 | kwcdn.com img.kwcdn.com/product/open | 🇺🇸 FASTLY | Request: Response: image/jpeg |  | |
| January 18, 2026 at 03:40:34 | Google googleads.g.doubleclick.net/pagead/intera... | Request: Response: image/gif | |||
| January 18, 2026 at 03:40:34 | Google pagead2.googlesyndication.com/pagead/gen_204 | Request: Response: image/gif | |||
| January 18, 2026 at 03:40:34 | Google pagead2.googlesyndication.com/pagead/gen_204 | Request: Response: image/gif | |||
| January 18, 2026 at 03:40:49 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| January 18, 2026 at 03:40:49 | Firebase android.googleapis.com/auth/devicekey | Request: application/x-protobuf Response: text/html | |||
| January 18, 2026 at 03:40:49 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| January 18, 2026 at 03:40:49 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| January 18, 2026 at 03:40:50 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| January 18, 2026 at 03:40:50 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| January 18, 2026 at 03:40:50 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| January 18, 2026 at 03:40:50 | Firebase play.googleapis.com/log/batch | Request: application/x-brotli Response: text/plain | |||
| May 21, 2025 at 10:51:47 | zipoapps.com config.toto.zipoapps.com/v1/apps | 🇺🇸 AMAZON-02 | Request: application/json Response: text/html | ||
| May 21, 2025 at 10:51:48 | Facebook www.facebook.com/adnw_sync2 | Request: application/x-www-form-urlencoded Response: text/javascript | |||
| May 21, 2025 at 10:51:44 | Google fundingchoicesmessages.google.com/a/consent | Request: application/json Response: application/json | |||
| May 21, 2025 at 10:51:44 | Firebase firebaseinstallations.googleapis.com/v1/p... | Request: application/json Response: application/json | |||
| May 21, 2025 at 10:51:46 | Yandex startup.mobile.yandex.net/analytics/startup | 🇷🇺 YANDEX LLC | Request: Response: application/octet-stream | ||
| May 21, 2025 at 10:51:47 | Google googleads.g.doubleclick.net/mads/static | Request: Response: text/html | |||
| May 21, 2025 at 10:51:47 | Google googleads.g.doubleclick.net/favicon.ico | Request: Response: image/x-icon | |||
| May 21, 2025 at 10:51:49 | AppLovin ms.applovin.com/5.0/i | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| May 21, 2025 at 10:51:49 | AppLovin rt.applovin.com/4.0/pix | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| May 21, 2025 at 10:51:49 | AppLovin d.applovin.com/2.0/device | 🇺🇸 GOOGLE-CLOUD-PLATFORM | Request: application/json Response: application/json | ||
| May 21, 2025 at 10:51:49 | Google googleads.g.doubleclick.net/mads/gma | Request: Response: application/json |