Thief and Run 3D
Data calls made by Thief and Run 3D
Overview of network connections made by Thief and Run 3D during the first 60 seconds after installation.
Thief and Run 3D contacted 42 different domains within the first minute of opening. This data was collected from 8 independent scans We identified 56 ad creatives being loaded, confirming active ad monetization. across servers in πΊπΈ π·πΊ πΈπ¬ πΈπͺ π©πͺ, providing transparency into the app's actual network behavior and data sharing practices.
Scan Runs
8
Unique Domains
42
Ad Creatives Found
56
Countries
πΊπΈπ·πΊπΈπ¬πΈπͺπ©πͺ
Contacted Domains (42)
APIs
| February 13, 2026 at 07:32:41 | Firebase firebaseinstallations.googleapis.com/v1/p... | πΊπΈ Google LLC | Request: application/json Response: application/json | ||
| February 13, 2026 at 07:32:42 | Yandex mobile.yandexadexchange.net/v1/startup | π·πΊ YANDEX LLC | Request: Response: | ||
| February 13, 2026 at 07:32:42 | Yandex startup.mobile.yandex.net/analytics/startup | π·πΊ YANDEX LLC | Request: Response: application/octet-stream | ||
| February 13, 2026 at 07:32:42 | Google googleads.g.doubleclick.net/mads/static | πΊπΈ Google LLC | Request: Response: text/html | ||
| February 13, 2026 at 07:32:43 | Google googleads.g.doubleclick.net/mads/static | πΊπΈ Google LLC | Request: Response: text/cache-manifest | ||
| February 13, 2026 at 07:32:43 | Google googleads.g.doubleclick.net/favicon.ico | πΊπΈ Google LLC | Request: Response: image/x-icon | ||
| February 13, 2026 at 07:32:43 | Google googleads.g.doubleclick.net/getconfig/pub... | πΊπΈ Google LLC | Request: Response: application/json | ||
| February 13, 2026 at 07:32:43 | Google googleads.g.doubleclick.net/mads/gma | πΊπΈ Google LLC | Request: Response: application/json | ||
| February 13, 2026 at 07:32:44 | Yandex report.appmetrica.yandex.net/report | π·πΊ YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| February 13, 2026 at 07:32:44 | Google pagead2.googlesyndication.com/omsdk/releases | πΊπΈ Google LLC | Request: Response: text/javascript | ||
| February 13, 2026 at 07:32:44 | Google pagead2.googlesyndication.com/omsdk/releases | πΊπΈ Google LLC | Request: Response: text/javascript | ||
| February 13, 2026 at 07:32:44 | Yandex report.appmetrica.yandex.net/report | π·πΊ YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| February 13, 2026 at 07:32:45 | Firebase fonts.googleapis.com/css | πΊπΈ Google LLC | Request: Response: text/css | ||
| February 13, 2026 at 07:32:45 | Google tpc.googlesyndication.com/pagead/js | πΊπΈ Google LLC | Request: Response: text/javascript | ||
| February 13, 2026 at 07:32:45 | Google tpc.googlesyndication.com/pagead/js | πΊπΈ Google LLC | Request: Response: text/javascript | ||
| February 13, 2026 at 07:32:45 | Google tpc.googlesyndication.com/pagead/js | πΊπΈ Google LLC | Request: Response: text/javascript | ||
| February 13, 2026 at 07:32:45 | Google tpc.googlesyndication.com/pagead/js | πΊπΈ Google LLC | Request: Response: text/javascript | ||
| February 13, 2026 at 07:32:45 | Google tpc.googlesyndication.com/pagead/js | πΊπΈ Google LLC | Request: Response: text/javascript | ||
| February 13, 2026 at 07:32:45 | Google tpc.googlesyndication.com/pagead/js | πΊπΈ Google LLC | Request: Response: text/javascript | ||
| February 13, 2026 at 07:32:45 | Google fonts.gstatic.com/s/opensans | πΊπΈ Google LLC | Request: Response: font/woff2 | ||
| February 13, 2026 at 07:32:45 | Google tpc.googlesyndication.com/simgad/13440125... | πΊπΈ Google LLC | Request: Response: image/jpeg | ||
| February 13, 2026 at 07:32:45 | Google www.googletagservices.com/activeview/js | πΊπΈ Google LLC | Request: Response: text/javascript | ||
| February 13, 2026 at 07:32:45 | Google lh3.googleusercontent.com/zi48OeRywL0DGv8... | πΊπΈ Google LLC | Request: Response: image/jpeg | ||
| February 13, 2026 at 07:32:46 | Google pagead2.googlesyndication.com/pagead/gen_204 | πΊπΈ Google LLC | Request: Response: image/gif | ||
| February 13, 2026 at 07:32:46 | Google pagead2.googlesyndication.com/pagead/gen_204 | πΊπΈ Google LLC | Request: Response: image/gif | ||
| February 13, 2026 at 07:32:47 | Google googleads.g.doubleclick.net/pagead/intera... | πΊπΈ Google LLC | Request: Response: image/gif | ||
| February 13, 2026 at 07:32:53 | Firebase app-measurement.com/config/app | πΊπΈ Google LLC | Request: Response: application/x-protobuf | ||
| February 13, 2026 at 07:32:54 | Firebase app-measurement.com/a | πΊπΈ Google LLC | Request: application/x-www-form-urlencoded Response: image/gif | ||
| October 15, 2025 at 06:10:32 | Google googleads.g.doubleclick.net/pagead/images | πΊπΈ GOOGLE | Request: Response: image/svg+xml | ||
| October 15, 2025 at 06:10:28 | Firebase firebaseinstallations.googleapis.com/v1/p... | πΊπΈ GOOGLE | Request: application/json Response: application/json | ||
| October 15, 2025 at 06:10:31 | Google fonts.gstatic.com/s/opensans | πΊπΈ GOOGLE | Request: Response: font/woff2 | ||
| October 15, 2025 at 06:10:31 | Google www.gstatic.com/mysidia/ff458a3b900e05bec... | πΊπΈ GOOGLE | Request: Response: text/javascript | ||
| October 15, 2025 at 06:10:31 | Google www.gstatic.com/mysidia/877273e96ffbdd68d... | πΊπΈ GOOGLE | Request: Response: text/javascript | ||
| October 15, 2025 at 06:10:31 | Google tpc.googlesyndication.com/pagead/js | πΊπΈ GOOGLE | Request: Response: text/javascript | ||
| October 15, 2025 at 06:10:31 | Google www.gstatic.com/mysidia/c35ab70571fe0c033... | πΊπΈ GOOGLE | Request: Response: text/javascript | ||
| October 15, 2025 at 06:10:31 | Google www.gstatic.com/mysidia/096c746ec407272ea... | πΊπΈ GOOGLE | Request: Response: text/javascript | ||
| October 15, 2025 at 06:10:31 | Google www.gstatic.com/mysidia/7bc2df524656702b0... | πΊπΈ GOOGLE | Request: Response: text/javascript | ||
| October 15, 2025 at 06:10:28 | Yandex startup.mobile.yandex.net/analytics/startup | π·πΊ YANDEX LLC | Request: Response: application/octet-stream | ||
| October 15, 2025 at 06:10:29 | Yandex mobile.yandexadexchange.net/v1/startup | π·πΊ YANDEX LLC | Request: Response: | ||
| October 15, 2025 at 06:10:28 | Google googleads.g.doubleclick.net/mads/static | πΊπΈ GOOGLE | Request: Response: text/html | ||
| October 15, 2025 at 06:10:28 | Google googleads.g.doubleclick.net/mads/static | πΊπΈ GOOGLE | Request: Response: text/html | ||
| October 15, 2025 at 06:10:29 | Google googleads.g.doubleclick.net/mads/static | πΊπΈ GOOGLE | Request: Response: text/javascript | ||
| October 15, 2025 at 06:10:29 | Google googleads.g.doubleclick.net/favicon.ico | πΊπΈ GOOGLE | Request: Response: image/x-icon | ||
| October 15, 2025 at 06:10:29 | Google googleads.g.doubleclick.net/getconfig/pub... | πΊπΈ GOOGLE | Request: Response: application/json | ||
| October 15, 2025 at 06:10:29 | Google googleads.g.doubleclick.net/mads/static | πΊπΈ GOOGLE | Request: Response: text/cache-manifest | ||
| October 15, 2025 at 06:10:29 | Google googleads.g.doubleclick.net/mads/static | πΊπΈ GOOGLE | Request: Response: text/javascript | ||
| October 15, 2025 at 06:10:30 | Yandex report.appmetrica.yandex.net/report | π·πΊ YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| October 15, 2025 at 06:10:30 | Google googleads.g.doubleclick.net/mads/gma | πΊπΈ GOOGLE | Request: Response: application/json | ||
| October 15, 2025 at 06:10:30 | Yandex report.appmetrica.yandex.net/report | π·πΊ YANDEX LLC | Request: application/x-www-form-urlencoded Response: application/json | ||
| October 15, 2025 at 06:10:31 | Google tpc.googlesyndication.com/pagead/js | πΊπΈ GOOGLE | Request: Response: text/javascript |
