Moon VPN
Data calls made by Moon VPN
Overview of network connections made by Moon VPN during the first 60 seconds after installation.
Moon VPN contacted 4 different domains within the first minute of opening. This data was collected from 3 independent scans We identified 0 ad creatives being loaded, confirming active ad monetization. across servers in 🇺🇸 🇮🇷, providing transparency into the app's actual network behavior and data sharing practices.
Scan Runs
3
Unique Domains
4
Ad Creatives Found
0
Countries
🇺🇸🇮🇷
Contacted Domains (4)
| February 18, 2026 at 08:20:39 | Firebase firebaseinstallations.googleapis.com/v1/p... | 🇺🇸 Google LLC | Request: application/json Response: application/json | ||
| February 18, 2026 at 08:20:39 | pn01.fun a8090.pn01.fun/servers/public | 🇮🇷 Noyan Abr Arvan Co. ( Private Joint Stock) | Request: application/json Response: | ||
| June 10, 2025 at 19:19:19 | ip-api.com http://ip-api.com | 🇺🇸 TUT-AS | Request: Response: application/json | ||
| June 10, 2025 at 19:19:19 | Firebase firebaseinstallations.googleapis.com/v1/p... | Request: application/json Response: | |||
| June 10, 2025 at 19:19:40 | Firebase firebase-settings.crashlytics.com/spi/v2 | Request: Response: application/json | |||
| June 10, 2025 at 19:19:40 | Firebase firebaseinstallations.googleapis.com/v1/p... | Request: application/json Response: application/json | |||
| June 10, 2025 at 19:19:40 | Firebase firebase-settings.crashlytics.com/spi/v2 | Request: Response: application/json | |||
| June 10, 2025 at 19:19:41 | ip-api.com http://ip-api.com | 🇺🇸 TUT-AS | Request: Response: application/json | ||
| June 10, 2025 at 19:19:41 | pn01.fun a8090.pn01.fun/servers/public | 🇮🇷 Noyan Abr Arvan Co. ( Private Joint Stock) | Request: Response: | ||
| June 10, 2025 at 19:19:41 | pn01.fun a8090.pn01.fun/servers/public | 🇮🇷 Noyan Abr Arvan Co. ( Private Joint Stock) | Request: application/json Response: | ||
| June 10, 2025 at 19:19:46 | Firebase android.googleapis.com/auth/devicekey | Request: application/x-protobuf Response: text/html | |||
| June 10, 2025 at 19:20:39 | Firebase play.googleapis.com/play/log | Request: application/x-gzip Response: text/plain | |||
| October 19, 2025 at 05:50:39 | ip-api.com http://ip-api.com | 🇺🇸 TUT-AS | Request: Response: application/json | ||
| October 19, 2025 at 05:50:39 | Firebase firebase-settings.crashlytics.com/spi/v2 | Request: Response: application/json | |||
| October 19, 2025 at 05:50:39 | Firebase firebaseinstallations.googleapis.com/v1/p... | Request: application/json Response: application/json | |||
| October 19, 2025 at 05:50:40 | Firebase firebase-settings.crashlytics.com/spi/v2 | Request: Response: application/json | |||
| October 19, 2025 at 05:50:40 | Firebase crashlyticsreports-pa.googleapis.com/v1/f... | Request: application/json Response: | |||
| October 19, 2025 at 05:50:40 | pn01.fun a8090.pn01.fun/servers/public | 🇮🇷 Noyan Abr Arvan Co. ( Private Joint Stock) | Request: Response: | ||
| October 19, 2025 at 05:50:40 | pn01.fun a8090.pn01.fun/servers/public | 🇮🇷 Noyan Abr Arvan Co. ( Private Joint Stock) | Request: application/json Response: | ||
| October 19, 2025 at 05:51:07 | Firebase proactivebackend-pa.googleapis.com/assist... | Request: application/grpc Response: application/grpc |